Re: keeping users from running shells

1999-03-16 Thread Adam D. McKenna
From: Cris Daniluk <[EMAIL PROTECTED]> :Isn't there a *real* way to do this? I swear there is... By "real way", do you mean a way that's not already built into your operating system? --Adam

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Cris Daniluk
Eric Dahnke wrote: > Cris Daniluk escribió: > > > Eric Dahnke wrote: > > > > > Hello List, > > > > > > We have a server moving about 9000 msgs per day and want to have a > > > second qmail server waiting on our network to take over in the event of > > > a failure. > > > > > > Our current thinking

Re: keeping users from running shells

1999-03-16 Thread Cris Daniluk
"Adam D. McKenna" wrote: > Sorry for the late reply, but this isn't a qmail problem, it's a unix file > permissions problem. > > # groupadd shellusr > # vi /etc/group > # chown root.shellusr /bin/csh > # chmod 750 /bin/csh > # chown root.shellusr /bin/sh > # chmod 750 /bin/sh > # chown root.shell

Re: Did this work?

1999-03-16 Thread Peter van Dijk
On Tue, Mar 16, 1999 at 11:53:16PM +, Robin Bowes wrote: > Peter van Dijk wrote: > > > > On Tue, Mar 16, 1999 at 11:03:23PM +, Robin Bowes wrote: > > > A test. > > > > Depending on what you're trying, I think it did :) > > > > I'm testing my mailing list <--> newsgroup gateway. > > I

Re: Did this work?

1999-03-16 Thread Robin Bowes
Peter van Dijk wrote: > > On Tue, Mar 16, 1999 at 11:03:23PM +, Robin Bowes wrote: > > A test. > > Depending on what you're trying, I think it did :) I'm testing my mailing list <--> newsgroup gateway. I *think* I've just about got to the bottom of it, except the program I use to re-writ

Re: Did this work?

1999-03-16 Thread Peter van Dijk
On Tue, Mar 16, 1999 at 11:03:23PM +, Robin Bowes wrote: > A test. Depending on what you're trying, I think it did :) Greetz, Peter. -- .| Peter van Dijk | stoned worden of coden .| [EMAIL PROTECTED] | dat is de levensvraag | coden of stoned worden

Did this work?

1999-03-16 Thread Robin Bowes
A test. -- Two rules to success in life: 1. Don't tell people everything you know. -- Sassan Tat

Re: dot-qmail security

1999-03-16 Thread Dave Sill
Joel Eriksson <[EMAIL PROTECTED]> wrote: > >On Mon, 15 Mar 1999, Dave Sill wrote: > >> Brad Shelton <[EMAIL PROTECTED]> wrote: >> > >> >All you have to do is create it as root and make it readable by the mail >> >process for the user. They can read it, but they can't replace it. >> >> Not true. I

Re: Mail loop problem

1999-03-16 Thread Matt Kercher
On Tue, Mar 16, 1999 at 09:27:24AM -0500, Mark E Drummond wrote: > The problem is that mail to a non-existant or mispelled address within > our domain gets sent to the internal hub, which checks it and does not > find a valid RCPT, and so it sends the email back to the MX. Now the MX, > instead of

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Ari Rubenstein
On Tue, 16 Mar 1999, Eric Dahnke wrote: > What do you mean by hold all the messages? > > Our mailserver does both smtp and pop, so therein lies the problem. Great, so > the MX rolls and the backup server accepts smtp for our domains. But what > about pop? When the primary server comes back up,

Re: dot-qmail security

1999-03-16 Thread Joel Eriksson
On Mon, 15 Mar 1999, Dave Sill wrote: > Brad Shelton <[EMAIL PROTECTED]> wrote: > > > >All you have to do is create it as root and make it readable by the mail > >process for the user. They can read it, but they can't replace it. > > Not true. If the user can write the directory, they can replac

[Fwd: Qmail smtp delivery]

1999-03-16 Thread Donna Phillips
> I'm looking for a way to have qmail 1.03 deliver mail to Maildir's which all > have the same uid/gid. I'm have vchkpw-3.1.3 running, and I know I can > accomplish the task via this method, however I do not want to require 7.5k users > to change their mail settings to include the domain name

Re: dot-qmail security

1999-03-16 Thread Joel Eriksson
On Mon, 15 Mar 1999 [EMAIL PROTECTED] wrote: > It is very easy to make users ftp in only to their ~home/public_html, > thus they will not be able to alter the .qmail files. chroot() is broken on Solaris 2.5.1, which is running on the server. But it doesn't matter anyway, since I made a patch for

Re: dot-qmail security

1999-03-16 Thread Joel Eriksson
On Sun, 14 Mar 1999, Vince Vielhaber wrote: > On 15-Mar-99 Mate Wierdl wrote: > > But if the users do not have shell access, how do they create .qmail files? > > ftp it from their local machine. They'll be able to at least forward mail > and maybe do some simple lists, but I doubt they'd be abl

Re: Should tcpserver block connections once conccurrency has been reached

1999-03-16 Thread Mark Delany
At 09:14 AM 3/16/99 +, Yusuf Goolamabbas wrote: >Hi, I am currently using tcpserver on a Linux 2.0.36 box/RH 5.2 box >I have setup tcpserver with a limit of 5 connections via -c5 and >backlog of 1 with -b1 > >However, when I start up the 7th and subsequent connection, I >basically get held up

Re: dot-qmail security

1999-03-16 Thread Matthias Pigulla
Juan Carlos Castro y Castro wrote: > > But it would fix in no way the problems in this thread. > > Maybe it would be too much for the person who originally brought the > question, because users would be unable to do anything with their .qmail > while what the guy wanted was only to prevent them f

Re: Mail loop problem

1999-03-16 Thread Sam
Mark E Drummond writes: > The problem is that mail to a non-existant or mispelled address within > our domain gets sent to the internal hub, which checks it and does not Your "internal hub" is broken. Contact your software vendor for a fix. If your software vendor is unable to produce a proper

Re: Mail loop problem

1999-03-16 Thread Mark E Drummond
Harald Hanche-Olsen wrote: > > - Mark E Drummond <[EMAIL PROTECTED]>: > > | My setup is an external gateway machine running qmail (our MX), > | forwarding mail for our domain to our internal mailhub running > | Netscape Messaging Server (NMS) which all our users access using > | IMAP. > | > | Th

Re: Mail loop problem

1999-03-16 Thread Harald Hanche-Olsen
- Mark E Drummond <[EMAIL PROTECTED]>: | My setup is an external gateway machine running qmail (our MX), | forwarding mail for our domain to our internal mailhub running | Netscape Messaging Server (NMS) which all our users access using | IMAP. | | The problem is that mail to a non-existant or m

Re: ezmlm and "delay notifies" (was: Re: mini-bounce)

1999-03-16 Thread Bruno Wolff III
On Mon, Mar 15, 1999 at 06:13:15PM -0500, Scott Schwartz <[EMAIL PROTECTED]> wrote: > Peter van Dijk <[EMAIL PROTECTED]> writes: > | But yes, it would consider these warnings as bounces. > > It also considers vacation messages to be bounces. :-( Vacation programs shouldn't be replying to lists

keeping users from running shells

1999-03-16 Thread Adam D. McKenna
Sorry for the late reply, but this isn't a qmail problem, it's a unix file permissions problem. # groupadd shellusr # vi /etc/group # chown root.shellusr /bin/csh # chmod 750 /bin/csh # chown root.shellusr /bin/sh # chmod 750 /bin/sh # chown root.shellusr /bin/ksh # chmod 750 /bin/ksh etc.. Of

Re: ezmlm and "delay notifies" (was: Re: mini-bounce)

1999-03-16 Thread Fred Lindberg
On Mon, 15 Mar 1999 18:22:50 -0500, Justin Bell wrote: >but vacation messages shouldnt be replying to list email, right? 1. ezmlm lists can be set up via DIR/headeradd to contain "Precedence: Bulk". Vacation programs should not respond to these. ezmlm-idx since quite a while does this by default

Mail loop problem

1999-03-16 Thread Mark E Drummond
Hi folks. I put my new qmail based MX into production yesterday and it is working great. However, I have one problem and I am not sure which end I should look to for the answer. My setup is an external gateway machine running qmail (our MX), forwarding mail for our domain to our internal mailhub

Re: Fwd: round robin rcpt's

1999-03-16 Thread xs
elite, thats exactly what i need. i was gonna take the code someone else had posted and write my own ticketing system, but this is much cooler. thanks to everyone. -xs On Tue, 16 Mar 1999, Guy Antony Halse wrote: >> hey all, >> i was wondering if anyone knew of a package that did this, or pe

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Eric Dahnke
Cris Daniluk escribió: > Eric Dahnke wrote: > > > Hello List, > > > > We have a server moving about 9000 msgs per day and want to have a > > second qmail server waiting on our network to take over in the event of > > a failure. > > > > Our current thinking is: > > > > - an identical qmail install

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Eric Dahnke
Andy Walden escribió: > > > > - an identical qmail installation on a backup machine > > - daily copy of /home /control and /alias to backup machine > > - in the event of a massive failure unplug the ethernet from the main > > server and plug into the backup machine. > > > > (I realize we will los

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Cris Daniluk
Eric Dahnke wrote: > Hello List, > > We have a server moving about 9000 msgs per day and want to have a > second qmail server waiting on our network to take over in the event of > a failure. > > Our current thinking is: > > - an identical qmail installation on a backup machine > - daily copy of /

Re: Back-up scheme, 2 qmail servers

1999-03-16 Thread Krzysztof Dabrowski
>My question is, will there be any implications "Out_There" of suddenly >having a new IP and hostname for our mailserver, assuming we make the >appro DNS changes? Maybe you could arrange it on your router via port forwarding? You set it up to forward all conenction for ports 25 i 110 to first mac

Re: rblsmtp - I need to change the bounce report.

1999-03-16 Thread torben fjerdingstad
On Sun, Mar 14, 1999 at 02:48:09PM +0100, torben fjerdingstad wrote: > On Fri, Mar 12, 1999 at 11:19:30PM +0100, Harald Hanche-Olsen wrote: > > - torben fjerdingstad <[EMAIL PROTECTED]>: > > > > | At the same time I think it should be modified to be able to take > > | multiple -r flags. > > > >

Re: [LONG QUOTE] Re: dot-qmail security

1999-03-16 Thread Oliver Thuns
>> This is an extract from proftpd menual: > >Has anyone managed to get proftpd to actually chroot? Yes :-)

Re: CNAME_

1999-03-16 Thread Harald Hanche-Olsen
- RJP <[EMAIL PROTECTED]>: | | G'Day. | I have been sporadically trying to set up Qmail-1.03 for about 3 weeks | now and keep running into: | | Mar 16 09:07:53 SedricWorks qmail: 921575273.166915 status: local 0/10 | remote 2/20 | Mar 16 09:07:53 SedricWorks qmail: 921575273.276501 delivery 4:

qmail Digest 16 Mar 1999 11:00:00 -0000 Issue 581

1999-03-16 Thread qmail-digest-help
qmail Digest 16 Mar 1999 11:00:00 - Issue 581 Topics (messages 22971 through 23016): dot-qmail security 22971 by: Matthias Pigulla <[EMAIL PROTECTED]> 22972 by: Markus Stumpf <[EMAIL PROTECTED]> 22978 by: Juan Carlos Castro y Castro <[EMAIL PROTECTED]> 22981

CNAME_

1999-03-16 Thread RJP
G'Day. I have been sporadically trying to set up Qmail-1.03 for about 3 weeks now and keep running into: Mar 16 09:07:53 SedricWorks qmail: 921575273.166915 status: local 0/10 remote 2/20 Mar 16 09:07:53 SedricWorks qmail: 921575273.276501 delivery 4: deferral: CNAME_lookup_failed_temporarily._

Re: vsm -> /Maildir/ migration script

1999-03-16 Thread Roman V. Isaev
On 03/16, [EMAIL PROTECTED] wrote: > maybe smd. has written already a script which will create the proper > ~/Maildir/ for every user in /etc/passwd ? > I would really be happy to get this one (: My modified checkpassword does that... just rip off main() from maildirmake.c and insert it i

Should tcpserver block connections once conccurrency has been reached

1999-03-16 Thread Yusuf Goolamabbas
Hi, I am currently using tcpserver on a Linux 2.0.36 box/RH 5.2 box I have setup tcpserver with a limit of 5 connections via -c5 and backlog of 1 with -b1 However, when I start up the 7th and subsequent connection, I basically get held up waiting for the smtpgreeting string which will occur as so

Re: round robin rcpt's

1999-03-16 Thread Anand Buddhdev
On Mon, Mar 15, 1999 at 02:02:12PM -0800, Kai MacTane wrote: > >so for each message to [EMAIL PROTECTED], it is delivered to those three > >people, what i would like to do is have every other message goto > >every other person, so msg1 goes to tech1, msg2 goes to tech2, msg3 goes > >to tech3, msg

cancel <36ED9EF0.10D7CA45@i.am>

1999-03-16 Thread Robin Bowes
This message was cancelled from within Mozilla.

Re: Fwd: round robin rcpt's

1999-03-16 Thread Guy Antony Halse
> hey all, > i was wondering if anyone knew of a package that did this, or perhaps > something qmail might allready have that will round robin messages to > different rcpt's, for example: Hiya ... I have written a program that does just this, we use it for our help@rucus address. It round robins

Re: dot-qmail security

1999-03-16 Thread Brian Reichert
On Mon, Mar 15, 1999 at 06:20:46PM -0700, Scott D. Yelich wrote: > The issue is: Fine, users should be able to modify their .qmail files -- > but they should not be able to pipe to a shell or other command. Did I miss anything? Why noy just have qmail-local chroot, and hand-craft a ~/bin directo