qmail Digest 24 Apr 2001 10:00:00 -0000 Issue 1344
Topics (messages 61146 through 61326):
Quest about msg-to:
61146 by: Roy Svendsen
Re: qmail-pop3d not working?
61147 by: Brett Randall
61200 by: Steven Katz
61201 by: Michael T. Babcock
61212 by: Michael T. Babcock
61226 by: Dave Sill
61229 by: Steven Katz
61235 by: Steven Katz
Re: mailing list software to use with qmail?
61148 by: Brett Randall
user masquerading
61149 by: Roberto Zanasi
Re: Trying to install qmail
61150 by: Dave Sill
Re: how to send attaching in qmail using perl
61151 by: David Young
61247 by: Medi Montaseri
61287 by: Forrest Sutton
Re: Can't establish SMTP connection (Error 4.4.1)
61152 by: jessica
61154 by: jessica
61236 by: Willy De la Court
61255 by: Andy Bradford
61257 by: Henning Brauer
61274 by: Forrest Sutton
61276 by: Forrest Sutton
Re: Qmail and Procmail
61153 by: jessica
61275 by: Forrest Sutton
Mail cleansing program
61155 by: jessica
61277 by: Forrest Sutton
Re: I am back to square ONE...
61156 by: jessica
61191 by: Bob Greene
61278 by: Forrest Sutton
ScanMail Message: To Recipient virus found and action taken.
61157 by: System Attendant
61166 by: System Attendant
61173 by: System Attendant
61178 by: System Attendant
61181 by: System Attendant
61185 by: System Attendant
61187 by: Alex Pennace
61189 by: System Attendant
61199 by: System Attendant
61203 by: System Attendant
61211 by: System Attendant
61230 by: Vincent Schonau
61231 by: David Young
61241 by: System Attendant
61246 by: System Attendant
61252 by: Alex Pennace
61254 by: Robin S. Socha
61260 by: denis
61261 by: Aaron L. Meehan
61296 by: System Attendant
61298 by: System Attendant
61300 by: System Attendant
61303 by: System Attendant
61307 by: System Attendant
Re: How to block an email id in qmail?
61158 by: jessica
61279 by: Forrest Sutton
Re: Very slow qmail response
61159 by: jessica
61161 by: jessica
61196 by: NDSoftware
61280 by: Forrest Sutton
61283 by: Forrest Sutton
Re: tcpserver help
61160 by: jessica
61194 by: Michelle Leonard
61206 by: NDSoftware
61238 by: Henning Brauer
61239 by: Andy Bradford
61245 by: Alex Pennace
61282 by: Forrest Sutton
Virus found in message "Re: Can't establish SMTP connection (Error 4.4.1)"
61162 by: System Anti-Virus Administrator
61174 by: System Anti-Virus Administrator
Re: Hide firewall ?
61163 by: jessica
61207 by: Deslions Nicolas
61209 by: NDSoftware
61256 by: Chris Johnson
61284 by: Forrest Sutton
Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus
61164 by: ANTIGEN_ITMAILMAN2
61170 by: ANTIGEN_ITMAILMAN2
61188 by: ANTIGEN_ITMAILMAN2
61192 by: ANTIGEN_ITMAILMAN2
61202 by: ANTIGEN_ITMAILMAN2
61213 by: ANTIGEN_ITMAILMAN2
61290 by: ANTIGEN_ITMAILMAN2
61292 by: ANTIGEN_ITMAILMAN2
61294 by: ANTIGEN_ITMAILMAN2
61297 by: ANTIGEN_ITMAILMAN2
61302 by: ANTIGEN_ITMAILMAN2
61305 by: ANTIGEN_ITMAILMAN2
61308 by: ANTIGEN_ITMAILMAN2
61315 by: Jeremy Suo-Anttila
Re: qmail, qmail-command and procmail
61165 by: jessica
61285 by: Forrest Sutton
qmail-qread and qmail-qstat as suid root...
61167 by: jessica
61215 by: Michelle Leonard
61220 by: NDSoftware
61286 by: Forrest Sutton
Re: FOUND VIRUS IN MAIL from [EMAIL PROTECTED] to
[EMAIL PROTECTED]
61168 by: Brett Randall
61218 by: Jankok, Lucio
61228 by: Michael Peppard
Virus found in message "Re: Qmail and Procmail"
61169 by: System Anti-Virus Administrator
61234 by: Mads E Eilertsen
61262 by: Jason Haar
Re: Domain name added twice
61171 by: Charles Cazabon
VIRUS ALERT
61172 by: Alan R.
61237 by: S.P. Hoeke
61240 by: Andy Bradford
Re: Can I force a download on POP
61175 by: Charles Cazabon
Antigen found W32/Navidad-B (Sophos,Norman) virus
61176 by: ANTIGEN_ITMAILMAN2
61180 by: ANTIGEN_ITMAILMAN2
61183 by: ANTIGEN_ITMAILMAN2
61198 by: ANTIGEN_ITMAILMAN2
61208 by: ANTIGEN_ITMAILMAN2
61217 by: ANTIGEN_ITMAILMAN2
61288 by: ANTIGEN_ITMAILMAN2
61291 by: ANTIGEN_ITMAILMAN2
61293 by: ANTIGEN_ITMAILMAN2
61295 by: ANTIGEN_ITMAILMAN2
61299 by: ANTIGEN_ITMAILMAN2
61304 by: ANTIGEN_ITMAILMAN2
61306 by: ANTIGEN_ITMAILMAN2
Re: E-MAIL-SCAN:VIRUSWARNUNG! IN ANLAGE~RE: CAN'T ESTABLISH SMTP CONNECTION (ERROR
4.4.1)
61177 by: Andreas Dohling
Virus found in message "Mail cleansing program"
61179 by: System Anti-Virus Administrator
Virus found in message "Re: I am back to square ONE..."
61182 by: System Anti-Virus Administrator
VIRUS TROUVE : Re: I am back to square ONE...
61184 by: NDSoftware
Virus found in message "Re: Fw: How to block an email id in qmail?"
61186 by: System Anti-Virus Administrator
Virus found in message "Re: Very slow qmail response"
61190 by: System Anti-Virus Administrator
VIRUS IN QMAIL-LIST
61193 by: Andreas Grip
61233 by: Charles Cazabon
VIRUS TROUVE : Re: Fw: How to block an email id in qmail?
61195 by: NDSoftware
VIRUS TROUVE : Re: Very slow qmail response
61197 by: NDSoftware
61204 by: NDSoftware
61325 by: NDSoftware
VIRUS TROUVE : Re: tcpserver help
61205 by: NDSoftware
61326 by: NDSoftware
VIRUS TROUVE : Re: Hide firewall ?
61210 by: NDSoftware
Virus propagation in action
61214 by: Todd Finney
61258 by: Chris Johnson
VIRUS TROUVE : Re: qmail, qmail-command and procmail
61216 by: NDSoftware
VIRUS TROUVE : qmail-qread and qmail-qstat as suid root...
61219 by: NDSoftware
Re: Virus found !!!
61221 by: Gustav-Martin Olsen
61244 by: Jason Kawaja
Re: change envelope from line
61222 by: Gustav-Martin Olsen
Re: Backup
61223 by: Dave Sill
big-todo patch
61224 by: Mehul Choksi
61248 by: Charles Cazabon
[OT] Re: VIRUS ALERT
61225 by: Jason Kawaja
61251 by: Andy Bradford
61264 by: Ricardo Cerqueira
61266 by: Fabrice Scemama
Re: Can I use qmail-pop3d for both mbox and maildir format?
61227 by: Dave Sill
Re: Queue Building
61232 by: Mehul Choksi
61253 by: Charles Cazabon
Re: Some mail is getting to qmail, some others aren't
61242 by: Henning Brauer
Spam is worse than a Virus
61243 by: Jerry Lynde
[ANNOUNCE] TMDA 0.01 - A qmail-based anti-SPAM system
61249 by: Jason R. Mastaler
Re: incorrect_user@correct_domain accepted
61250 by: Ketan Bajaj
61263 by: Charles Cazabon
61265 by: Ketan Bajaj
Re: Pop goes my weasel
61259 by: David L. Nicol
Vulnerable MUAs ...
61267 by: David Talkington
61270 by: Roger Merchberger
61272 by: David Talkington
61309 by: Peter Cavender
61313 by: David Talkington
61314 by: David Talkington
61320 by: Frank Tegtmeyer
CAN'T Send to lists!
61268 by: Marco Calistri
61269 by: Johan Almqvist
61271 by: Marco Calistri
61322 by: Johan Almqvist
vmailmgr accpect correctuser@incorrectdomain as system-account user.
61273 by: Michael Cheung
61301 by: Tim Hunter
Re: Qmail Authentication
61281 by: Forrest Sutton
61319 by: hari_bhr
.qmail alias file with an underscore in the entry...
61289 by: Cleo Macy
61316 by: Chris Bolt
Here we go again [was Re: Antigen found W32/Navidad-B (Sophos,Norman) virus ]
61310 by: Andy Bradford
Prepare for a bumpy ride, another one infected
61311 by: Andreas Landmark
questions about an exploit
61312 by: Paul Tan
61323 by: davidu.gangstabitches.net
Compressed Maildir + IMAP
61317 by: Mustafa Mahudhawala
how to _delay_ failed authentication
61318 by: Kittiwat Manosuthi
61324 by: Peter van Dijk
About Security
61321 by: Wiroon Ruangsang
Administrivia:
To unsubscribe from the digest, e-mail:
[EMAIL PROTECTED]
To subscribe to the digest, e-mail:
[EMAIL PROTECTED]
To bug my human owner, e-mail:
[EMAIL PROTECTED]
To post to the list, e-mail:
[EMAIL PROTECTED]
----------------------------------------------------------------------
Roy SvendsenLife is like an potato!
Just type: # rpm -e --nodeps exim And be happy! You don't need it... >>>>> "Steven" == Steven Katz <[EMAIL PROTECTED]> writes: > Sure enough, Exim is running, but I didn't realize this would cause > problems. When I try to remove it, I get the following: > # rpm -e exim > error: removing these packages would break dependencies: > smtpdaemon is needed by fetchmail-5.5.0-2 > smtpdaemon is needed by mutt-1.2.5i-8. > I understand mutt is recommended for Maildirs. Does this mean I'll be > unable to use it? > Steven >> -----Original Message----- >> From: Rick Updegrove <[EMAIL PROTECTED]> >> Sent: Monday, April 23, 2001 1:21 AM >> To: Steven Katz; [EMAIL PROTECTED] >> Subject: Re: qmail-pop3d not working? >> >> >> From: "Steven Katz" <[EMAIL PROTECTED]> >> >> > The message could not be sent because one of the recipients was >> > rejected by the server. Server Response: '550 relaying to >> > <[EMAIL PROTECTED]> prohibited by administrator'. (Account: >> > '[EMAIL PROTECTED]', SMTP Server: 'mail.idma.com', Error Number: >> > 0x800ccc79). >> >> I am not an expert, but I don't think that is qmail talking >> because I have caused every possible >> error every step of the way, so check for yourself. I think you >> are running Exim An Internet mailer >> for Unix systems. http://www.exim.org >> >> [root@ns2 /root]# telnet 208.25.75.162 25 >> Trying 208.25.75.162... >> Connected to 208.25.75.162. >> Escape character is '^]'. >> 220 shasta.idma.com ESMTP Exim 3.13 #1 Mon, 23 Apr 2001 00:08:04 -0700 >> >> Hope that helped >> >> Rick Up >> >> >> >> -- "Hardware, n.: The parts of a computer system that can be kicked." - The Devil's Dictionary to Computer Studies
You're right, I removed it and I am happy! Note to archive archeologists: Running Exim and qmail simultaneously will cause intermittent problems. There's my contribution to the time capsule. Thanks again, everyone. Steven > -----Original Message----- > From: Brett Randall <[EMAIL PROTECTED]> > Sent: Monday, April 23, 2001 3:08 AM > To: Steven Katz > Cc: [EMAIL PROTECTED] > Subject: Re: qmail-pop3d not working? > > > Just type: > > # rpm -e --nodeps exim > > And be happy! You don't need it... > > >>>>> "Steven" == Steven Katz <[EMAIL PROTECTED]> writes: > > > Sure enough, Exim is running, but I didn't realize this would cause > > problems. When I try to remove it, I get the following: > > > # rpm -e exim > > error: removing these packages would break dependencies: > > smtpdaemon is needed by fetchmail-5.5.0-2 > > smtpdaemon is needed by mutt-1.2.5i-8. > > > I understand mutt is recommended for Maildirs. Does this mean I'll be > > unable to use it? > > > Steven > > > >> -----Original Message----- > >> From: Rick Updegrove <[EMAIL PROTECTED]> > >> Sent: Monday, April 23, 2001 1:21 AM > >> To: Steven Katz; [EMAIL PROTECTED] > >> Subject: Re: qmail-pop3d not working? > >> > >> > >> From: "Steven Katz" <[EMAIL PROTECTED]> > >> > >> > The message could not be sent because one of the recipients was > >> > rejected by the server. Server Response: '550 relaying to > >> > <[EMAIL PROTECTED]> prohibited by administrator'. (Account: > >> > '[EMAIL PROTECTED]', SMTP Server: 'mail.idma.com', Error Number: > >> > 0x800ccc79). > >> > >> I am not an expert, but I don't think that is qmail talking > >> because I have caused every possible > >> error every step of the way, so check for yourself. I think you > >> are running Exim An Internet mailer > >> for Unix systems. http://www.exim.org > >> > >> [root@ns2 /root]# telnet 208.25.75.162 25 > >> Trying 208.25.75.162... > >> Connected to 208.25.75.162. > >> Escape character is '^]'. > >> 220 shasta.idma.com ESMTP Exim 3.13 #1 Mon, 23 Apr 2001 00:08:04 -0700 > >> > >> Hope that helped > >> > >> Rick Up > >> > >> > >> > >> > > -- > "Hardware, n.: The parts of a computer system that can be kicked." > > - The Devil's Dictionary to Computer Studies >
On some systems, it can be helpful to do a "grep -i pop /etc/services" to find out what the nomenclature is as well. FYI (to the original poster), that POP3 you misspelt (un*x is usually case sensitive) is just looked up in a file like /etc/services and the port substituted in. ----- Original Message ----- > It means change the "POP3" to "pop3" and try the command again. If you > get the same error, try "pop-3". If none of those work, substitute "110" > instead. It's not necessary to include the quotes.
> 4. Oh, and you haven't told us whether you followed instructions > exactly when setting up qmail-pop3d/run. Do the instructions really > say to use POP3 in uppercase? The page he referenced at http://www.faqts.com/knowledge_base/view.phtml/aid/8225/fid/223 does indeed have POP3 in uppercase. Dave Sill may wish to update that with a comment or two.
"Mark Delany" <[EMAIL PROTECTED]> wrote: >You might want to feed this back to the faqts people. Let's others >benefit from what you've learnt. It's fixed. -Dave
Uh oh-- I may have celebrated too soon. For some reason, I can send but can't receive 15 minutes after rebooting. Does that sound familiar to anyone? Steven > -----Original Message----- > From: Brett Randall <[EMAIL PROTECTED]> > Sent: Monday, April 23, 2001 3:08 AM > To: Steven Katz > Cc: [EMAIL PROTECTED] > Subject: Re: qmail-pop3d not working? > > > Just type: > > # rpm -e --nodeps exim > > And be happy! You don't need it... > > >>>>> "Steven" == Steven Katz <[EMAIL PROTECTED]> writes: > > > Sure enough, Exim is running, but I didn't realize this would cause > > problems. When I try to remove it, I get the following: > > > # rpm -e exim > > error: removing these packages would break dependencies: > > smtpdaemon is needed by fetchmail-5.5.0-2 > > smtpdaemon is needed by mutt-1.2.5i-8. > > > I understand mutt is recommended for Maildirs. Does this mean I'll be > > unable to use it? > > > Steven > > > >> -----Original Message----- > >> From: Rick Updegrove <[EMAIL PROTECTED]> > >> Sent: Monday, April 23, 2001 1:21 AM > >> To: Steven Katz; [EMAIL PROTECTED] > >> Subject: Re: qmail-pop3d not working? > >> > >> > >> From: "Steven Katz" <[EMAIL PROTECTED]> > >> > >> > The message could not be sent because one of the recipients was > >> > rejected by the server. Server Response: '550 relaying to > >> > <[EMAIL PROTECTED]> prohibited by administrator'. (Account: > >> > '[EMAIL PROTECTED]', SMTP Server: 'mail.idma.com', Error Number: > >> > 0x800ccc79). > >> > >> I am not an expert, but I don't think that is qmail talking > >> because I have caused every possible > >> error every step of the way, so check for yourself. I think you > >> are running Exim An Internet mailer > >> for Unix systems. http://www.exim.org > >> > >> [root@ns2 /root]# telnet 208.25.75.162 25 > >> Trying 208.25.75.162... > >> Connected to 208.25.75.162. > >> Escape character is '^]'. > >> 220 shasta.idma.com ESMTP Exim 3.13 #1 Mon, 23 Apr 2001 00:08:04 -0700 > >> > >> Hope that helped > >> > >> Rick Up > >> > >> > >> > >> > > -- > "Hardware, n.: The parts of a computer system that can be kicked." > > - The Devil's Dictionary to Computer Studies >
It seems to be only pop that stops working after 15 minutes, as messages are piling up in the Maildirs. My mail client reports: A timeout occurred while communicating with the server. (Account: '[EMAIL PROTECTED]', POP3 Server: 'mail.idma.com', Error Number: 0x800ccc19). At which point, doing 'sh -x /var/qmail/supervise/qmail-pop3d/run' gives me: tcpserver: fatal: unable to bind: address already used My /qmail-pop3d/run file looks like: #!/bin/sh exec /usr/local/bin/softlimit -m 2000000 \ /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup \ idma.com /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1 Doing 'ps auxw | grep pop3' gives me: root 593 0.0 0.4 1272 344 ? SN 08:06 0:00 supervise qmail-pop3d root 601 0.0 0.6 1344 512 ? SN 08:06 0:00 /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup idma root 10162 0.0 0.6 1344 516 ? SN 08:24 0:00 /usr/local/bin/tcpserver -v -R 0 pop3 /var/qmail/bin/qmail-popup idma root 31977 0.0 0.7 1556 616 pts/0 S 08:38 0:00 grep pop3 Doing 'cd /var/qmail/supervise && svstat qmail-smtpd' gives me: qmail-smtpd: up (pid 596) 1962 seconds Doing 'ls -l ~/* | grep Maildir --after-context=4' gives me: /home/steven/Maildir: total 16 drwxrwxr-x 2 steven steven 4096 Apr 21 23:22 cur drwxrwxr-x 2 steven steven 8192 Apr 23 08:36 new drwxrwxr-x 2 steven steven 4096 Apr 23 08:36 tmp > -----Original Message----- > From: Steven Katz <[EMAIL PROTECTED]> > Sent: Monday, April 23, 2001 9:32 AM > To: [EMAIL PROTECTED] > Subject: RE: qmail-pop3d not working? > > > Uh oh-- I may have celebrated too soon. For some reason, I can send > but can't receive 15 minutes after rebooting. Does that sound familiar > to anyone? > > Steven >
www.ezmlm.org >>>>> "Peter" == Peter Peltonen <[EMAIL PROTECTED]> writes: > Could someone recommend me a good mailing list software that works fine with > qmail and has a web based admin interface? > First I thought about mailman but after reading it's README.QMAIL I am a bit > in doubt, as it seems to have so many issues regarding Qmail. > Regards, > Peter -- "Is OS/2 only half an operating system ?"
I need to set user masquerading via configuration file, and not via environmental variables. Is it possibile? -- http://digilander.iol.it/42
"|nix ZixinG" <[EMAIL PROTECTED]> wrote: >Hi guys, Visit this site. His QMAIL howto is simply the best > >http://www.enixus.com.sg/~simbajaj/documents/ascii/qmail-HOWTO After a quick look I'm not too impressed. If you follow his directions, you'll likely end up with the qmail "sendmail" setuid root. And English is clearly not his first language. He gets his point across, but the grammatical errors are distracting. For a Linux qmail HOWTO, I prefer Adam McKenna's: http://www.flounder.net/qmail/qmail-howto.html -Dave
> it works fine. now, i want to know how to make this script send attachments. This is Perl question, not a qmail question. You probably want to use the MIME::Lite perl package. If you don't understand why you'd use this package, then http://pages.prodigy.net/michael_santovec/decode.htm is a good place to start.
Sending attatchments is very easy....if you want to modify your own Perl function, here is
a sample for TXT attatchments. What I'm sharing is a Perl program called mmail(1). run it
with -h to get the help stuff. See SendMail() function for an example of writing attatchments.
davidu wrote:
I would recommend that if you have mutt installed you just use mutt from the command line, it is one for the few MUA's that can work from the command line without user intervention.read the mutt manpage.-davidu-----Original Message-----hi all, iam using a perl script to send mails via qmail using qmail-inject. my code looks like this: $mailprog = "/var/qmail/bin/qmail-inject";open(QMAIL,"|$mailprog -f mugund\@intercept-india.com");
From: mugundhan [mailto:[EMAIL PROTECTED]]
Sent: Monday, April 23, 2001 12:57 AM
To: qmail
Subject: how to send attaching in qmail using perl
print QMAIL "From: mugund\@intercept-india.com\n";
print QMAIL "To: recip\@recip.com\n";
print QMAIL "Subject: subject\n";
print QMAIL "Content-type: text/html\n";
print QMAIL "hi.this is a test\n";
close(QMAIL);it works fine. now, i want to know how to make this script send attachments.iam not knowing how to send attachments using this script in perl. what are the changes which i will have to make in this script in order to send attachments. pls do give me a solution ASAP. thanks in advance. Have a nice day. Regards,
S.Mugundhan,
Tech Solutions,
[EMAIL PROTECTED]-- ======================================================================= Medi Montaseri, [EMAIL PROTECTED], 408-450-7114 Prepass Inc, IT/Operations, Software Eng. =======================================================================#!/usr/bin/perl # ========================================================= # Desc : This program mails a message to a group of recipients. # A generic subject is provided if subject is not provided. # If -f From is not specified, real-uid@host is assumed. # If -m message is not sepcified, stdin is assume. # Usage : $0 [-s "My Subject"] [-m MesgFile] [-f From] # -r "List1 List2 ... Listn" | -e email1 email2 ... emailn" # # where MesgFile is an absolute path ot a file containing the message # List-i is an abosolute path a to file containing email addresses # and email-i is an email address, either -r or -e must be present # Input : MsgFile1 MsgFile2...MsgFilen List1 List2 ... Listn # Output: pipe to sendmail # Version: 1.1 # Author: Medi, Montaseri, 00/12/14 # History: 01/01/19, added multiple message file feature # ========================================================= # ------------------------ constructor ---------------------- BEGIN { use strict; use vars qw ($opt_h $opt_s $opt_m $opt_f $opt_r $opt_e); use Getopt::Std; use Sys::Hostname; } # ------------------------ prototypes ------------------- sub PrintHelp(); sub GetSubject($); sub GetFrom($); sub GetMessages($$); sub GetRecipients($$); sub SendMail($$$$); # ------------------------ Global Vars ------------------ my $Usage = "$0 [-h] [-s 'My Subject'] [-m 'MesgFile1 MsgFile2 ...MsgFilen'] [-f From] -r 'List1...Listn' | -e 'email1 email2 ... emailn'"; $|++; # ======================= main() ====================== # Validate usage die "$Usage \n" unless ( $#ARGV >= 0 ); die "$Usage" unless ( getopts('hs:m:f:r:e:') ); PrintHelp() if ( $opt_h ); die "$Usage" unless ( $opt_r || $opt_e ); my $Subject = GetSubject($opt_s); my $From = GetFrom($opt_f) ; my %Messages = (); GetMessages($opt_m || '-' , \%Messages) || die "$0: Error: failed getting message [$!]"; my $Recipients = GetRecipients($opt_r, $opt_e) || die "$0: Error: failed getting recipients [$!]"; SendMail($From, $Subject, \%Messages, $Recipients); # ----------------------- PrintHelp() ------------ sub PrintHelp() { my $Hostname = hostname() ; my $Name = getpwuid( $< ); my $From = $Name . '@' . $Hostname; print <<"EOH"; Usage: $Usage Where -s 'My Subject' is an optional string, quoted if multi-token -f from is the optional from line, else set to $From -m msgfile is the optional mesg file or stdin if not provided list-i is a file containing list of recipients EOH exit(1); } # ---------------------- GetSubject() ------------------ sub GetSubject($) { my $subject = shift; return($subject) if ( $subject ); $subject = "Message-Of " . localtime(); return($subject); } # ---------------------- GetFrom() ------------------ sub GetFrom($) { my $from = shift; return($from) if ( $from ); $from = getpwuid($<) . '@' . hostname(); return($from); } # ---------------------- GetMessages() -------------------- # Usage: GetMessages($MsgFile) # Desc : This function takes a MesgFile and returns the content in a scalar sub GetMessages($$) { my ($msgfile, $MsgsRef) = @_; return(undef) unless ( $msgfile ); $/ = undef; my ($OpenedMsg); for my $m ( split(' ', $msgfile ) ) { open(MSG, "$m") || do { warn("can not open $m [$!]"); next}; $OpenedMsg++; $m =~ s/^-$/standard_input/; $MsgsRef->{"$m"} = <MSG>; # slurp in the entire message close(MSG); } $/ = "\n"; ($OpenedMsg)? return(1): return(undef); } # ---------------------- GetRecipients() -------------------- sub GetRecipients($$) { return(undef) unless ( @_ ); # I better have some payload my ($r, $e) = @_; my (%Recipients); if ( $r ) { my $f; my @files = split(/\s+/, $r); foreach $f ( @files ) { open(IN, "$f") || do { warn("$0: Error: opening [$f], proceeding $!"); next; }; while(<IN>) { chop(); $Recipients{$_}++ ; } close(IN); } } if ( $e ) { my @emails = split(/\s+/, $e); my $email; foreach $email ( @emails ) { $Recipients{"$email"}++; } } return( join(',', sort (keys(%Recipients))) ); } # ---------------------- SendMail() ---------------------- sub SendMail($$$$) { my ($From, $Subject, $MsgsRef, $Recipients) = @_; my $Date = localtime(); open(OUT, "| /usr/sbin/sendmail -t -f $From" ) || die "failed instantiating sendmail $!"; print OUT <<EOT; From: $From To: $Recipients Date: $Date Subject: $Subject Reply-To: $From MIME-Version: 1.0 X-Mailer: mmail version 1.0 X-Accept-Language: en Content-Type: multipart/mixed; boundary="============$$" This is a multi-part message in MIME format. --============$$ Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit ========== This is a machine generated message. See Attatchment(s) ========= EOT my ($filename, $filecontent); my %tmp = %$MsgsRef; while ( ($filename, $filecontent) = each ( %tmp ) ) { print OUT <<EOT; --============$$ Content-Type: text/plain; charset=us-ascii; name="$filename" Content-Transfer-Encoding: 7bit filename="$filename" $filecontent EOT } print OUT <<EOT; --============$$-- EOT close(OUT); if ( $@ ) { warn("sendmail returned $@ $!"); } } # ---------------------------------------------------------- __END__
Sending attatchments is very easy....if you want to modify your own Perl function, here is a sample for TXT attatchments. What I'm sharing is a Perl program called mmail(1). run it with -h to get the help stuff. See SendMail() function for an example of writing attatchments. davidu wrote: > I would recommend that if you have mutt installed you just use mutt > from the command line, it is one for the few MUA's that can work from > the command line without user intervention.read the mutt > manpage.-davidu > > -----Original Message----- > From: mugundhan [mailto:[EMAIL PROTECTED]] > Sent: Monday, April 23, 2001 12:57 AM > To: qmail > Subject: how to send attaching in qmail using perl > hi all, iam using a perl script to send mails via qmail > using qmail-inject. my code looks like this: $mailprog = > "/var/qmail/bin/qmail-inject";open(QMAIL,"|$mailprog -f > mugund\@intercept-india.com"); > print QMAIL "From: mugund\@intercept-india.com\n"; > print QMAIL "To: recip\@recip.com\n"; > print QMAIL "Subject: subject\n"; > print QMAIL "Content-type: text/html\n"; > print QMAIL "hi.this is a test\n"; > close(QMAIL);it works fine. now, i want to know how to make > this script send attachments.iam not knowing how to send > attachments using this script in perl. what are the changes > which i will have to make in this script in order to send > attachments. pls do give me a solution ASAP. thanks in > advance. Have a nice day. Regards, > S.Mugundhan, > Tech Solutions, > [EMAIL PROTECTED] > -- ======================================================================= Medi Montaseri, [EMAIL PROTECTED], 408-450-7114 Prepass Inc, IT/Operations, Software Eng. =======================================================================
Emanuel.exe
On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote: > > Any hints what I am missing in my configuration? > > Did you restart qmail after establishing the route in smtproutes? That's not necessary. smtproutes is reread by every new invocation of qmail-remote. Chris
* Mac Schwarz <[EMAIL PROTECTED]> [010406 11:58]: > I've setup a qmail server in our DMZ for relaying mail to the internal > Exchange server. We've got two domains and I want the qmail server to > forward all mail for one of the domains to the Exchange server. > First I've setup the Exchange server to accept @bioid-dev.de in addition > to bioid.com. Then I installed qmail on a OpenBSD server in the DMZ. > On the qmail server I installed tinydns and configured the Exchange > server as MX for bioid-dev.de. In the control directory of qmail I've > got an rcpthost file with an entry for bioid-dev.de and a smtproutes > file with the line bioid-dev.de:192.186.20.10. The IP is the Exchange > server. > > Any hints what I am missing in my configuration? Give us the output of qmail-showctl. I suspect that the format of the mailroutes file is garbled or permissions are wrong. Double-check the IP given in smtproutes, too. -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Attention attached to this message i received was the emanual virus. Is'nt it time to install a virus scanner on the list. On Monday, April 23, 2001 16:05, jessica [SMTP:[EMAIL PROTECTED]] wrote: << File: ATT00089.txt; charset = big5 >> << File: Emanuel.exe >> -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> iQA/AwUBOuRW2/4IaGw3x6aJEQLiQQCdEZBMUiG5H9WrSH1b3LfQgCr+3dQAn2BC q6SvljEaRo89KTHbZTukGp1d =ss/U -----END PGP SIGNATURE-----
On Mon, 23 Apr 2001 19:22:50 +0200, Willy De la Court wrote: > Is'nt it time to install a virus scanner on the list. Why? I see no reason why the list should have a virus scanner. Andy
On Mon, Apr 23, 2001 at 07:22:50PM +0200, Willy De la Court wrote: > Is'nt it time to install a virus scanner on the list. No. It's time to drop windoze and these clueless virii scanners sending bunches of unwanted, uneeded, bandwidth cosuming spam messages back to mailing lists. -- Henning Brauer | BS Web Services Hostmaster BSWS | Roedingsmarkt 14 [EMAIL PROTECTED] | 20459 Hamburg http://www.bsws.de | Germany
On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote: > > Any hints what I am missing in my configuration? > > Did you restart qmail after establishing the route in smtproutes? That's not necessary. smtproutes is reread by every new invocation of qmail-remote. Chris
* Mac Schwarz <[EMAIL PROTECTED]> [010406 11:58]: > I've setup a qmail server in our DMZ for relaying mail to the internal > Exchange server. We've got two domains and I want the qmail server to > forward all mail for one of the domains to the Exchange server. > First I've setup the Exchange server to accept @bioid-dev.de in addition > to bioid.com. Then I installed qmail on a OpenBSD server in the DMZ. > On the qmail server I installed tinydns and configured the Exchange > server as MX for bioid-dev.de. In the control directory of qmail I've > got an rcpthost file with an entry for bioid-dev.de and a smtproutes > file with the line bioid-dev.de:192.186.20.10. The IP is the Exchange > server. > > Any hints what I am missing in my configuration? Give us the output of qmail-showctl. I suspect that the format of the mailroutes file is garbled or permissions are wrong. Double-check the IP given in smtproutes, too. -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
* Alexander Meis <[EMAIL PROTECTED]> [010406 12:21]: > i Try to setup qmail with maildirs and Procmail Mailfiltering. > Ok Qmail works. How do i enable the filtering to of Procmail to > the ariving Mails ? I found nothing in the manual. Tip 1: Don't start new threads by replying to unrelated messages. Tip 2: If possible, use maildrop instead of procmail. www.courier-mta.org Tip 3: Put the following into your .qmail file |preline procmail -t .procmailrc (assuming that you already have a .procmailrc) -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
* Alexander Meis <[EMAIL PROTECTED]> [010406 12:21]: > i Try to setup qmail with maildirs and Procmail Mailfiltering. > Ok Qmail works. How do i enable the filtering to of Procmail to > the ariving Mails ? I found nothing in the manual. Tip 1: Don't start new threads by replying to unrelated messages. Tip 2: If possible, use maildrop instead of procmail. www.courier-mta.org Tip 3: Put the following into your .qmail file |preline procmail -t .procmailrc (assuming that you already have a .procmailrc) -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
Hi! I wonder if there is a mail cleansing program out there that is configurable and mime-compliant. By mail cleansing program, I mean a program that can be instructed to only keep the text/plain part of a multipart/alternative message [Oh, I HATE people that send multipart/alternative messages where the text/plain message just says "You can't display HTML mail". Oh the morons.] If it were really cool, it'd even convert text/html to text/enriched... There's some work done in reformime... need I take it from there? -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
Hi! I wonder if there is a mail cleansing program out there that is configurable and mime-compliant. By mail cleansing program, I mean a program that can be instructed to only keep the text/plain part of a multipart/alternative message [Oh, I HATE people that send multipart/alternative messages where the text/plain message just says "You can't display HTML mail". Oh the morons.] If it were really cool, it'd even convert text/html to text/enriched... There's some work done in reformime... need I take it from there? -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
* "Kirti S. Bajwa" <[EMAIL PROTECTED]> [010406 18:22]: [a whole sh*tload of worthless information] - What is the problem? (Aka: What did you do? What did you expect to happen? What happened?) - What do the logs say (not the smtpd logs, the REAL qmail logs) -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
jessica wrote: > > * "Kirti S. Bajwa" <[EMAIL PROTECTED]> [010406 18:22]: > [a whole sh*tload of worthless information] > > - What is the problem? (Aka: What did you do? What did you expect to > happen? What happened?) > - What do the logs say (not the smtpd logs, the REAL qmail logs) > > -Johan > -- > Johan Almqvist > http://www.almqvist.net/johan/qmail/ > > ------------------------------------------------------------------------ > Name: Emanuel.exe > Emanuel.exe Type: unspecified type (application/octet-stream) > Encoding: base64 Oh goodie... Another round of Emanuel. Jessica: Please delouse your computer. -- Bob Greene [EMAIL PROTECTED] Pull my finger for my public key
* "Kirti S. Bajwa" <[EMAIL PROTECTED]> [010406 18:22]: [a whole sh*tload of worthless information] - What is the problem? (Aka: What did you do? What did you expect to happen? What happened?) - What do the logs say (not the smtpd logs, the REAL qmail logs) -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Can't establish SMTP connection (Error 4.4.1) Scanning Time = 04/23/2001 22:05:43 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae436b75.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Qmail and Procmail Scanning Time = 04/23/2001 22:11:08 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae437fc6.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = Re: Can't establish SMTP connection (Error 4.4.1) Scanning Time = 04/23/2001 22:16:27 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4393b7.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Mail cleansing program Scanning Time = 04/23/2001 22:21:16 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae43a5c8.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = Re: I am back to square ONE... Scanning Time = 04/23/2001 22:25:36 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae43b609.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = Re: Fw: How to block an email id in qmail? Scanning Time = 04/23/2001 22:34:06 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae43d5ea.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
On Mon, Apr 23, 2001 at 10:05:22PM +0800, System Attendant wrote: > ScanMail for Microsoft Exchange has detected virus-infected attachment(s). > > Sender = [EMAIL PROTECTED] > Recipient(s) = [EMAIL PROTECTED] > Subject = Re: Can't establish SMTP connection (Error 4.4.1) [snip] Am I the only one that finds it ironic that a list for a Unix MTA is plagued by a Windows mail trojan and a mail scanner eager to tell recipients about the disposition of the message? > Warning to recipient. ScanMail detected a virus in an email attachment and > has been removed! If this mail is from Internet, the sender don't know > his/her mail consists of virus and has been removed. Please ask the sender > to clean and re-send. ScanMail is broken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = Re: Very slow qmail response Scanning Time = 04/23/2001 22:39:10 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae43e8eb.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: Very slow qmail response Scanning Time = 04/23/2001 22:50:17 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae44129d.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: Hide firewall ? Scanning Time = 04/23/2001 22:59:47 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae44363e.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = Re: qmail, qmail-command and procmail Scanning Time = 04/23/2001 23:10:09 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae445d1f.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
On Mon, Apr 23, 2001 at 10:36:44AM -0400, Alex Pennace wrote: > Am I the only one that finds it ironic that a list for a Unix MTA is > plagued by a Windows mail trojan and a mail scanner eager to tell > recipients about the disposition of the message? Not likely, although you mispelled 'a bunch of scanners'. >> Warning to recipient. ScanMail detected a virus in an email attachment and >> has been removed! If this mail is from Internet, the sender don't know >> his/her mail consists of virus and has been removed. Please ask the sender >> to clean and re-send. > ScanMail is broken. That's ok. According to the above, it's been removed. Vince.
> ScanMail is broken. Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so broken... if you detect a virus from a list, is it better/worse to flood the list with warnings that the virus was found, or remain silent and risk more users flooding the list with more viruses? Either way, it's a lot of junk mail.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: tcpserver help Scanning Time = 04/24/2001 02:24:40 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4736710.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = jessica Recipient(s) = [EMAIL PROTECTED] Subject = qmail-qread and qmail-qstat as suid root... Scanning Time = 04/24/2001 03:01:05 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae47bed11.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
On Mon, Apr 23, 2001 at 12:44:03PM -0400, David Young wrote: > > ScanMail is broken. > > Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so > broken... if you detect a virus from a list, is it better/worse to flood the > list with warnings that the virus was found, or remain silent and risk more > users flooding the list with more viruses? Either way, it's a lot of junk > mail. It appears there are people who still click on attachments that they shouldn't click on, I don't see how a flood of messages would make them more judicious. I picked on ScanMail because it was the first to respond back, but all of these virus scanners should bounce to the envelope sender address and not to addresses in the to: line.
* David Young <[EMAIL PROTECTED]> writes: >> ScanMail is broken. > Only about 1/3 are from ScanMail. And I'm not sure it's behavior is so > broken... It is broken. No software whatsoever is entitled to send mail to lists. End of Discussion. > if you detect a virus from a list, is it better/worse to flood the > list with warnings that the virus was found, or remain silent and risk > more users flooding the list with more viruses? Virus? What virus? This is about qmail. Does qmail run on Wintendos? > Either way, it's a lot of junk mail. Yes, it is. And the culprit is broken software: 1. a broken family of "OS"es from Redmond 2. broken MUAs 3. broken anti-virus software Well, congrats, Bill - another blatant display of your software's utter superiority. -- Robin S. Socha http://my.gnus.org/ - To boldly frobnicate what no newbie has grokked before.
'Tis quite ironic indeed... Alex Pennace wrote: > On Mon, Apr 23, 2001 at 10:05:22PM +0800, System Attendant wrote: > > ScanMail for Microsoft Exchange has detected virus-infected attachment(s). > > > > Sender = [EMAIL PROTECTED] > > Recipient(s) = [EMAIL PROTECTED] > > Subject = Re: Can't establish SMTP connection (Error 4.4.1) > [snip] > > Am I the only one that finds it ironic that a list for a Unix MTA is > plagued by a Windows mail trojan and a mail scanner eager to tell > recipients about the disposition of the message? > > > Warning to recipient. ScanMail detected a virus in an email attachment and > > has been removed! If this mail is from Internet, the sender don't know > > his/her mail consists of virus and has been removed. Please ask the sender > > to clean and re-send. > > ScanMail is broken.
Quoting Alex Pennace ([EMAIL PROTECTED]): > Am I the only one that finds it ironic that a list for a Unix MTA is > plagued by a Windows mail trojan and a mail scanner eager to tell > recipients about the disposition of the message? which is why I use the following procmail rules given to me at some point by another list member and slightly modified. I decided to put them in after the last round of newbie whining about us being too tough on them ;-) Turns out I don't see any of these virus things. :0: * ^Mailing-List:.*contact [EMAIL PROTECTED]* * X-MSMail-.* /dev/null :0: * ^Mailing-List:.*contact [EMAIL PROTECTED]* * X-Mailer:.*(Internet Mail.*|Microsoft Outlook.*) /dev/null which sent to Mr. Null the following, apparently from an Upchuck user that decided to point out the obvious (which I've gleaned from reply to his mail, pity a procmail rule to filter out replies to trashed mail isn't so easy--maybe extract the message-id, keep it in a file and.. hmmm). >From [EMAIL PROTECTED] Mon Apr 23 16:58:35 2001 Subject: VIRUS IN QMAIL-LIST Folder: /dev/null Anyway, those rules are nicely filtering out all the cruft. :) Sorry to those folks that have to use them at work (never find me taking a job like that). Those that use them by choice, well, get a real MUA. The SNR is just too high! Hopefully Dan can rid the list of the morons--before uic's 'net connection gets (more) saturated :) > ScanMail is broken. Yep. Aaron
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = Forrest Sutton Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: Qmail Authentication Scanning Time = 04/24/2001 10:50:37 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4e9fd12.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: tcpserver help Scanning Time = 04/24/2001 10:54:07 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4eacf13.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = Forrest Sutton Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: Very slow qmail response Scanning Time = 04/24/2001 10:57:17 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4eb8b14.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = Forrest Sutton Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: Hide firewall ? Scanning Time = 04/24/2001 11:00:41 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4ec5915.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED];[EMAIL PROTECTED];[EMAIL PROTECTED] Subject = Re: how to send attaching in qmail using perl Scanning Time = 04/24/2001 11:10:06 Action on virus found: The attachment Emanuel.exe exists TROJ_NAVIDAD.E virus. ScanMail has Moved it. The attachment was moved to d:\Virus\Emanuel3ae4ee8e16.exe_. Warning to recipient. ScanMail detected a virus in an email attachment and has been removed! If this mail is from Internet, the sender don't know his/her mail consists of virus and has been removed. Please ask the sender to clean and re-send.
On Mon, Apr 02, 2001 at 12:52:30PM +0530, Mathew Chandy wrote: > > > I have a problem . I have to block an user say [EMAIL PROTECTED] from > sending > > mails to [EMAIL PROTECTED] . How can i acheive this in qmail. > > > > The mail server on mydomain.com is a qmail mail server. I tried doing this > > using the control file badrecipient in /var/qmail/control directory. But > > that doesn't work out. > > The file is "badmailfrom", not "badrecipient". -- David Benfell [EMAIL PROTECTED] --- SuSE, qmail, ezmlm, and much much more... Hire me!
On Mon, Apr 02, 2001 at 12:52:30PM +0530, Mathew Chandy wrote: > > > I have a problem . I have to block an user say [EMAIL PROTECTED] from > sending > > mails to [EMAIL PROTECTED] . How can i acheive this in qmail. > > > > The mail server on mydomain.com is a qmail mail server. I tried doing this > > using the control file badrecipient in /var/qmail/control directory. But > > that doesn't work out. > > The file is "badmailfrom", not "badrecipient". -- David Benfell [EMAIL PROTECTED] --- SuSE, qmail, ezmlm, and much much more... Hire me!
On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote: > And "-l 0" is also nonsense. No, it's not > This should be "-l localhostname" this is > a NAME, not a number. Says who? > > See > http://cr.yp.to/ucspi-tcp/tcpserver.html You should have seen it yourself. From that URL: ---- * -l localname: Do not look up the local host name in DNS; use localname * for the environment variable $TCPLOCALHOST. A common choice for localname * is 0. To avoid loops, you must use this option for servers on TCP port * 53. --- RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote: > And "-l 0" is also nonsense. This should be "-l localhostname" this is > a NAME, not a number. It can be whatever you want, and if you're not concerned about what is logged, 0 is as good as anything else. In fact, 0 is what DJB's publicfile's configure program uses. Chris
Jessica, please use a antivirus because you send a virus at all users ! Nicolas DEFFAYET, NDSoftware http://www.ndsoftware.net - [EMAIL PROTECTED] France: Tel +33 671887502 --- Note: All HTML email sent to me can be deleted for security reasons. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 4:07 PM To: [EMAIL PROTECTED] Subject: Re: Very slow qmail response On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote: > And "-l 0" is also nonsense. No, it's not > This should be "-l localhostname" this is > a NAME, not a number. Says who? > > See > http://cr.yp.to/ucspi-tcp/tcpserver.html You should have seen it yourself. From that URL: ---- * -l localname: Do not look up the local host name in DNS; use localname * for the environment variable $TCPLOCALHOST. A common choice for localname * is 0. To avoid loops, you must use this option for servers on TCP port * 53. --- RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | P? Duque Saldanha, 1, 7?E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote: > And "-l 0" is also nonsense. No, it's not > This should be "-l localhostname" this is > a NAME, not a number. Says who? > > See > http://cr.yp.to/ucspi-tcp/tcpserver.html You should have seen it yourself. From that URL: ---- * -l localname: Do not look up the local host name in DNS; use localname * for the environment variable $TCPLOCALHOST. A common choice for localname * is 0. To avoid loops, you must use this option for servers on TCP port * 53. --- RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
On Fri, Apr 06, 2001 at 09:20:44PM +0200, Markus Stumpf wrote: > And "-l 0" is also nonsense. This should be "-l localhostname" this is > a NAME, not a number. It can be whatever you want, and if you're not concerned about what is logged, 0 is as good as anything else. In fact, 0 is what DJB's publicfile's configure program uses. Chris
On Fri, Apr 06, 2001 at 03:34:18PM -0400, Todd Kennedy wrote: > I'm trying to run qmail with tcpserver, and running this command: > 17:31:44 root:/etc>/usr/local/bin/tcpserver -u 518 -g 521 0 smtp > /var/qmail/bin/qmail-smtpd & > > gives the following error messsage: > tcpserver: fatal: unable to bind: address already used Something is already listening to your SMTP port. Find out what it is and kill it. Chris
Take me off list please. no longer work at x-tant. Viruses attatched to mails. Thank you. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: 23 April 2001 15:07 To: Todd Kennedy Cc: [EMAIL PROTECTED] Subject: Re: tcpserver help On Fri, Apr 06, 2001 at 03:34:18PM -0400, Todd Kennedy wrote: > I'm trying to run qmail with tcpserver, and running this command: > 17:31:44 root:/etc>/usr/local/bin/tcpserver -u 518 -g 521 0 smtp > /var/qmail/bin/qmail-smtpd & > > gives the following error messsage: > tcpserver: fatal: unable to bind: address already used Something is already listening to your SMTP port. Find out what it is and kill it. Chris
PLEASE USE A ANTIVIRUS !!! Nicolas DEFFAYET, NDSoftware http://www.ndsoftware.net - [EMAIL PROTECTED] France: Tel +33 671887502 --- Note: All HTML email sent to me can be deleted for security reasons. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 4:07 PM To: Todd Kennedy Cc: [EMAIL PROTECTED] Subject: Re: tcpserver help On Fri, Apr 06, 2001 at 03:34:18PM -0400, Todd Kennedy wrote: > I'm trying to run qmail with tcpserver, and running this command: > 17:31:44 root:/etc>/usr/local/bin/tcpserver -u 518 -g 521 0 smtp > /var/qmail/bin/qmail-smtpd & > > gives the following error messsage: > tcpserver: fatal: unable to bind: address already used Something is already listening to your SMTP port. Find out what it is and kill it. Chris
On Tue, Apr 24, 2001 at 05:01:57PM +0200, NDSoftware wrote: > PLEASE USE A ANTIVIRUS !!! stop doubling this !@%%# The "blabla found Virus blbla" Messages are more annoying... -- Henning Brauer | BS Web Services Hostmaster BSWS | Roedingsmarkt 14 [EMAIL PROTECTED] | 20459 Hamburg http://www.bsws.de | Germany
On Tue, 24 Apr 2001 17:01:57 +0200, "NDSoftware" wrote: > PLEASE USE A ANTIVIRUS !!! Please don't send lame messages like this to the list. If you have already blocked the virus with your software then what are you worried about?
On Tue, Apr 24, 2001 at 05:01:35PM +0200, NDSoftware wrote: > PLEASE USE A ANTIVIRUS !!! [snip virus] It's bad enough that a dozen other mail hosts (including yours) are spamming the list with their thoughts on the matter for each of "jessica"'s messages. Please stop adding to the noise.
On Fri, Apr 06, 2001 at 03:34:18PM -0400, Todd Kennedy wrote: > I'm trying to run qmail with tcpserver, and running this command: > 17:31:44 root:/etc>/usr/local/bin/tcpserver -u 518 -g 521 0 smtp > /var/qmail/bin/qmail-smtpd & > > gives the following error messsage: > tcpserver: fatal: unable to bind: address already used Something is already listening to your SMTP port. Find out what it is and kill it. Chris
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Can't establish SMTP connection (Error 4.4.1) Message-ID: <015801c0cbfe$e6972250$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:05:27 +0800
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Can't establish SMTP connection (Error 4.4.1) Message-ID: <015a01c0cbfe$f66e9d70$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:05:54 +0800
On Mon, Apr 09, 2001 at 04:50:10AM +0200, Mike A. Sauvain wrote: > hyall, i need to hide the internal ip of my mailserver, > it see them only in messages, where i send and recive on my host: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 2817 invoked from network); 9 Apr 2001 02:40:18 -0000 > Received: from 62.x.x.x (HELO client) () > by 192.168.1.20 with SMTP; 9 Apr 2001 02:40:18 -0000 > ^^^^^^^^^ ^^ ^^^ If you're using tcpserver, try putting this in your rules file: 192.168.1.:allow,TCPREMOTEHOST="",TCPREMOTEIP="",RELAYCLIENT="" Chris
you should maybe learn some things about blocking virus before trying to help other people -----Message d'origine----- De?: jessica [mailto:[EMAIL PROTECTED]] Envoye?: Monday, April 23, 2001 16:09 A?: Mike A. Sauvain Cc?: [EMAIL PROTECTED] Objet?: Re: Hide firewall ? On Mon, Apr 09, 2001 at 04:50:10AM +0200, Mike A. Sauvain wrote: > hyall, i need to hide the internal ip of my mailserver, > it see them only in messages, where i send and recive on my host: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 2817 invoked from network); 9 Apr 2001 02:40:18 -0000 > Received: from 62.x.x.x (HELO client) () > by 192.168.1.20 with SMTP; 9 Apr 2001 02:40:18 -0000 > ^^^^^^^^^ ^^ ^^^ If you're using tcpserver, try putting this in your rules file: 192.168.1.:allow,TCPREMOTEHOST="",TCPREMOTEIP="",RELAYCLIENT="" Chris
CAN YOU USE A ANTIVIRUS ???? Nicolas DEFFAYET, NDSoftware http://www.ndsoftware.net - [EMAIL PROTECTED] France: Tel +33 671887502 --- Note: All HTML email sent to me can be deleted for security reasons. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 4:09 PM To: Mike A. Sauvain Cc: [EMAIL PROTECTED] Subject: Re: Hide firewall ? On Mon, Apr 09, 2001 at 04:50:10AM +0200, Mike A. Sauvain wrote: > hyall, i need to hide the internal ip of my mailserver, > it see them only in messages, where i send and recive on my host: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 2817 invoked from network); 9 Apr 2001 02:40:18 -0000 > Received: from 62.x.x.x (HELO client) () > by 192.168.1.20 with SMTP; 9 Apr 2001 02:40:18 -0000 > ^^^^^^^^^ ^^ ^^^ If you're using tcpserver, try putting this in your rules file: 192.168.1.:allow,TCPREMOTEHOST="",TCPREMOTEIP="",RELAYCLIENT="" Chris
On Mon, Apr 23, 2001 at 05:03:47PM +0200, Deslions Nicolas wrote: > you should maybe learn some things about blocking virus before trying to > help other people To whom are you addressing this? I was the one who answered the question, two weeks ago. I had nothing to do with the message containing the virus. I don't know why my message was reinjected with a virus attached, or by whom. Chris
On Mon, Apr 09, 2001 at 04:50:10AM +0200, Mike A. Sauvain wrote: > hyall, i need to hide the internal ip of my mailserver, > it see them only in messages, where i send and recive on my host: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 2817 invoked from network); 9 Apr 2001 02:40:18 -0000 > Received: from 62.x.x.x (HELO client) () > by 192.168.1.20 with SMTP; 9 Apr 2001 02:40:18 -0000 > ^^^^^^^^^ ^^ ^^^ If you're using tcpserver, try putting this in your rules file: 192.168.1.:allow,TCPREMOTEHOST="",TCPREMOTEIP="",RELAYCLIENT="" Chris
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Can't establish SMTP connection (Error 4.4.1)", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Qmail and Procmail", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Fw: How to block an email id in qmail?", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Very slow qmail response", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Very slow qmail response", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "qmail, qmail-command and procmail", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Qmail and Procmail", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Mail cleansing program", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Fw: How to block an email id in qmail?", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Qmail Authentication", was sent from and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "Very slow qmail response", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "qmail, qmail-command and procmail", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus. The file is currently Detected. The message, "how to send attaching in qmail using perl", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
turn off your stupid virus notification its mail bombing the listserver and wasting peoples time and bandwidth ----- Original Message ----- From: "ANTIGEN_ITMAILMAN2" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 23, 2001 9:51 PM Subject: Antigen found W32/Navidad.e@M (McAfee4,CA(InoculateIT)) virus > Antigen for Exchange found Emanuel.exe infected with W32/Navidad.e@M > (McAfee4,CA(InoculateIT)) virus. > The file is currently Detected. The message, "Fw: How to block an email id > in qmail?", was > sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail > located at Brite/MANCHESTER/ITMAILMAN2. >
On Mon, Apr 09, 2001 at 07:57:37PM +0000, Subba Rao wrote: > Hello, > > I have started qmail with the following option in /var/qmail/rc: > > exec env - PATH="/var/qmail/bin:$PATH" \ > qmail-start '|dot-forward .forward |preline procmail' splogger qmail > > Here I am explicitly using procmail as my MDA. My .qmail has one entry which is, > "./Maildir/" You're wrong. You're NOT using procmail as your MDA. You're using procmail as the system's MDA. From the moment you created a .qmail, you've overriden the system default. The default delivery mode only works when users don't specify their own. RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
On Mon, Apr 09, 2001 at 07:57:37PM +0000, Subba Rao wrote: > Hello, > > I have started qmail with the following option in /var/qmail/rc: > > exec env - PATH="/var/qmail/bin:$PATH" \ > qmail-start '|dot-forward .forward |preline procmail' splogger qmail > > Here I am explicitly using procmail as my MDA. My .qmail has one entry which is, > "./Maildir/" You're wrong. You're NOT using procmail as your MDA. You're using procmail as the system's MDA. From the moment you created a .qmail, you've overriden the system default. The default delivery mode only works when users don't specify their own. RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
Anyone know of any reasion why I shouldn't set the qmail-qread and qmail-qstat as setuid root? I've looked through the source, but am looking for a last confirmation or "don't do that." -sc -- Sean Chittenden
Take off list NOW -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: 23 April 2001 15:12 To: [EMAIL PROTECTED] Subject: qmail-qread and qmail-qstat as suid root... Anyone know of any reasion why I shouldn't set the qmail-qread and qmail-qstat as setuid root? I've looked through the source, but am looking for a last confirmation or "don't do that." -sc -- Sean Chittenden
I have a good solution for you: USE A ANTIVIRUS. Stop all send please all your lessage have a virus :( Nicolas DEFFAYET, NDSoftware http://www.ndsoftware.net - [EMAIL PROTECTED] France: Tel +33 671887502 --- Note: All HTML email sent to me can be deleted for security reasons. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 4:12 PM To: [EMAIL PROTECTED] Subject: qmail-qread and qmail-qstat as suid root... Anyone know of any reasion why I shouldn't set the qmail-qread and qmail-qstat as setuid root? I've looked through the source, but am looking for a last confirmation or "don't do that." -sc -- Sean Chittenden
Anyone know of any reasion why I shouldn't set the qmail-qread and qmail-qstat as setuid root? I've looked through the source, but am looking for a last confirmation or "don't do that." -sc -- Sean Chittenden
Just a quick note to any Winblowz users (and I can't say much...I'm sending this from my much hated Winblowz terminal running OE ATM)... A recent mail to the qmail list (in the last few minutes) contained a well-known virus... But then again, maybe I shouldn't be telling you this ;) B. ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 24, 2001 12:09 AM Subject: FOUND VIRUS IN MAIL from [EMAIL PROTECTED] to [EMAIL PROTECTED] > The attached mail has been found to contain a virus > The mail has been stored as /var/virusmails/qmailq/virus-20010424-27042 > xxxxxxxxxxxxxxxxxxTue Apr 24 00:09:00 EST 2001xxxxxxxxxxxxxxxxxxxxxxx > qmail-remote (0.2.1) called ipsware.com [EMAIL PROTECTED] [EMAIL PROTECTED] > FROM: [EMAIL PROTECTED] > TO: [EMAIL PROTECTED] > maxlevel: 0 > Contents of /var/tmp/qmail-remote27042/unpacked > total 36 > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 . > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 .. > -rw------- 1 qmailq qmail 281 Apr 24 00:09 988034940.27065-0.misspiggy > -rw------- 1 qmailq qmail 16896 Apr 24 00:09 Emanuel.exe > drwx------ 2 qmailq qmail 4096 Apr 24 00:09 SFX > > /var/tmp/qmail-remote27042/unpacked/SFX: > total 8 > drwx------ 2 qmailq qmail 4096 Apr 24 00:09 . > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 .. > Scanning /var/tmp/qmail-remote27042/unpacked/* > Scanning file /var/tmp/qmail-remote27042/unpacked/988034940.27065-0.misspiggy > Scanning file /var/tmp/qmail-remote27042/unpacked/Emanuel.exe > /var/tmp/qmail-remote27042/unpacked/Emanuel.exe > Found the W32/Navidad.e@M trojan !!! > > Summary report on /var/tmp/qmail-remote27042/unpacked/* > File(s) > Total files: ........... 2 > Clean: ................. 1 > Possibly Infected: ..... 1 > H+BEDV AntiVir scanstatus0 is: 0 > Mcafee scanstatus1 is: 0 > Dr. Solomon (old) scanstatus2 is: 0 > Dr. Solomon (new) scanstatus3 is: 0 > Sophos Sweep scanstatus4 is: 0 > NAI Virus Scan 4.x scanstatus5 is: 13 > KasperskyLab AVP scanstatus6 is: 0 > KasperskyLab AVPDaemonClient scantatus7 is: 0 > F-Secure Antivirus scanstatus8 is: 0 > Trend Micro FileScanner scanstatus9 is: 0 > CyberSoft vfind scanstatus10 is: 0 > CAI InoculateIT (inocucmd) scanstatus11 is: 0 > > Virus FOUND Sent notification to [EMAIL PROTECTED] > >
I had this too, but maybe it was just a mail with the fingerprint. regards, Lucio : -----Original Message----- : From: Brett Randall [mailto:[EMAIL PROTECTED]] : Sent: Monday, April 23, 2001 4:13 PM : To: [EMAIL PROTECTED] : Subject: Fw: FOUND VIRUS IN MAIL from : [EMAIL PROTECTED] to : [EMAIL PROTECTED] : : : Just a quick note to any Winblowz users (and I can't say : much...I'm sending : this from my much hated Winblowz terminal running OE ATM)... : A recent mail : to the qmail list (in the last few minutes) contained a : well-known virus... : But then again, maybe I shouldn't be telling you this ;) : : B. : : ----- Original Message ----- : From: <[EMAIL PROTECTED]> snip
I found this in my qmail-scanner program. I thought the list might be interested in it. sub is_automated_email { #This subroutine is used to see if the sender of this virus #was a mailing-list/postmaster/etc. If it is we don't want to #send a reply. if ($headers{'x-loop'} || $headers{'x-listname'} || $headers{'x-listmember'} || $headers{'mailing-list'} || $headers{'x-mailing-list'} || $headers{'precedence'} =~ /^(bulk|list|junk)$/i || $returnpath =~ /^$|daemon|request|bounce|mailer|postm|owner|lists|words|majordom|experts|\- (return|error)/i) { return 1; } else { return 0; } } -----Original Message----- From: Brett Randall [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 10:13 AM To: [EMAIL PROTECTED] Subject: Fw: FOUND VIRUS IN MAIL from [EMAIL PROTECTED] to [EMAIL PROTECTED] Just a quick note to any Winblowz users (and I can't say much...I'm sending this from my much hated Winblowz terminal running OE ATM)... A recent mail to the qmail list (in the last few minutes) contained a well-known virus... But then again, maybe I shouldn't be telling you this ;) B. ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, April 24, 2001 12:09 AM Subject: FOUND VIRUS IN MAIL from [EMAIL PROTECTED] to [EMAIL PROTECTED] > The attached mail has been found to contain a virus > The mail has been stored as /var/virusmails/qmailq/virus-20010424-27042 > xxxxxxxxxxxxxxxxxxTue Apr 24 00:09:00 EST 2001xxxxxxxxxxxxxxxxxxxxxxx > qmail-remote (0.2.1) called ipsware.com [EMAIL PROTECTED] [EMAIL PROTECTED] > FROM: [EMAIL PROTECTED] > TO: [EMAIL PROTECTED] > maxlevel: 0 > Contents of /var/tmp/qmail-remote27042/unpacked > total 36 > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 . > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 .. > -rw------- 1 qmailq qmail 281 Apr 24 00:09 988034940.27065-0.misspiggy > -rw------- 1 qmailq qmail 16896 Apr 24 00:09 Emanuel.exe > drwx------ 2 qmailq qmail 4096 Apr 24 00:09 SFX > > /var/tmp/qmail-remote27042/unpacked/SFX: > total 8 > drwx------ 2 qmailq qmail 4096 Apr 24 00:09 . > drwx------ 3 qmailq qmail 4096 Apr 24 00:09 .. > Scanning /var/tmp/qmail-remote27042/unpacked/* > Scanning file /var/tmp/qmail-remote27042/unpacked/988034940.27065-0.misspiggy > Scanning file /var/tmp/qmail-remote27042/unpacked/Emanuel.exe > /var/tmp/qmail-remote27042/unpacked/Emanuel.exe > Found the W32/Navidad.e@M trojan !!! > > Summary report on /var/tmp/qmail-remote27042/unpacked/* > File(s) > Total files: ........... 2 > Clean: ................. 1 > Possibly Infected: ..... 1 > H+BEDV AntiVir scanstatus0 is: 0 > Mcafee scanstatus1 is: 0 > Dr. Solomon (old) scanstatus2 is: 0 > Dr. Solomon (new) scanstatus3 is: 0 > Sophos Sweep scanstatus4 is: 0 > NAI Virus Scan 4.x scanstatus5 is: 13 > KasperskyLab AVP scanstatus6 is: 0 > KasperskyLab AVPDaemonClient scantatus7 is: 0 > F-Secure Antivirus scanstatus8 is: 0 > Trend Micro FileScanner scanstatus9 is: 0 > CyberSoft vfind scanstatus10 is: 0 > CAI InoculateIT (inocucmd) scanstatus11 is: 0 > > Virus FOUND Sent notification to [EMAIL PROTECTED] > >
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Qmail and Procmail Message-ID: <015901c0cbfe$f0de8320$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:05:43 +0800
> From: System Anti-Virus Administrator <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > A virus was discovered in an e-mail addressed to you. We have > rejected the infected mail so your computer will not be infected. Thank you. However, - a message from the list to me doesn't go through your computers. - you have now revealed that andreas2 is subscribed to the list. What about sending such warning messages to the envelope sender address? Or what about just dropping the infected messages silently? A simple 'grep ... exit 99' quietly stopped it for me. Sitting here with no virus but lots of warning messages it occurs to me that the latter is at least as disturbing as the first. Please consider doing something with your AV-software. Mads
On Mon, Apr 23, 2001 at 07:01:57PM +0200, Mads E Eilertsen wrote: > > > From: System Anti-Virus Administrator <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > > > A virus was discovered in an e-mail addressed to you. We have > > rejected the infected mail so your computer will not be infected. > > Sitting here with no virus but lots of warning messages it occurs > to me that the latter is at least as disturbing as the first. > Please consider doing something with your AV-software. A better statement to say would be: "don't dick with your AV-software, the author knew what he was doing!!!" That's *MY* Qmail-Scanner software that generated that message. Unfortunately that site has *REWRITTEN IT* so that it doesn't act as I intended. I went through a *LOT* of effort to stop Qmail-Scanner being like all those bl**dy commercial scanners that spam mailing-lists when they find viruses - mine specifically doesn't send AV messages to mailing-lists. I have vented by displeasure at the site owner. I am not happy. [one of the drawbacks of Open Source of course. Each user can rewrite it as they please] So now in an attempt to make a silk purse from a sow's ear; for those interested in a Email AV solution that won't spam mailing-lists with such messages, take a look at http://qmail-scanner.sourceforge.net/ ;-) -- Cheers Jason Haar Unix/Special Projects, Trimble NZ Phone: +64 3 9635 377 Fax: +64 3 9635 417
John P <[EMAIL PROTECTED]> wrote: > > > > qmail-inject assumes that a FQDN contains at least one dot. If it doesn't > > contain one, it assumes that it is a hostname with no domain, and appends > > the contents of /var/qmail/control/defaultdomain (or me, or > > "defaultdomain", in that order). This is in the manpage for qmail-inject. [...] > I was thinking of forcing the PHP script that's generating the script to > insert correct address (From: [EMAIL PROTECTED]) in the header, > but to me it seems a bit of a kludge. Is there a Better Way? I basically > don't want qmail-inject to add the system name in. As before SMTP+POP works > great. There's various Better Ways. If you inject via qmail-inject, you can just set the QMAILUSER and QMAILHOST environment variables and let qmail-inject do the right thing. If you're relaying through another qmail host, you can use the fixme/fixup trick for the originating IP address to send messages through qmail-inject or new-inject on that host, and cause it to rewrite headers in various arbitrary ways. You can supply an argument with the -f option to qmail-inject to just set the envelope sender. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
Jessica, You are sending email with virus. Please use some anti-virus program. Alan R. -----Original Message----- From: jessica [mailto:[EMAIL PROTECTED]] Sent: segunda-feira, 23 de abril de 2001 11:05 To: [EMAIL PROTECTED] Subject: Re: Can't establish SMTP connection (Error 4.4.1) On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote: > > Any hints what I am missing in my configuration? > > Did you restart qmail after establishing the route in smtproutes? That's not necessary. smtproutes is reread by every new invocation of qmail-remote. Chris
The stange thing is that, although the FROM address is this "jessica" person The bodies of the mail all have different signatures ? (from a number of people) At 16:15 23-4-01, Alan R. wrote: >Jessica, > >You are sending email with virus. Please use some anti-virus program. > >Alan R. > >-----Original Message----- >From: jessica [mailto:[EMAIL PROTECTED]] >Sent: segunda-feira, 23 de abril de 2001 11:05 >To: [EMAIL PROTECTED] >Subject: Re: Can't establish SMTP connection (Error 4.4.1) > > >On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote: > > > Any hints what I am missing in my configuration? > > > > Did you restart qmail after establishing the route in smtproutes? > >That's not necessary. smtproutes is reread by every new invocation of >qmail-remote. > >Chris
On Mon, 23 Apr 2001 11:15:08 -0300, "Alan R." wrote: > You are sending email with virus. Please use some anti-virus program. What makes it worse are dumb anti-virus scanners that bounce messages back to the list... :-) Andy
Sunil . <[EMAIL PROTECTED]> wrote: > >No, there's no technical solution. You need an administrative solution, > >such as telling your users "All messages will be deleted from the server > >when they are X days old", where X is 7, or 10, or 3, or whatever fits. > >You then set up a cronjob to look through all the user's > >Maildir/{cur,new}/* and delete any file older than X days every night at > >midnight or something. > Just wondering, how do i check if a file (or a mail) is X days old. This isn't a qmail question; it's a basic Unix question. In a Maildir, each message is a separate file, and in Unix, files have attributes (such as ctime, atime, mtime). In this case, you probably want to look at the ctime or mtime (creation time or modification time) of the file, as that will tell you when it was created, and therefore how old it is. For use in cron scripts, etc, you probably want to look at `man test`. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Can't establish SMTP connection (Error 4.4.1)", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Mail cleansing program", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "I am back to square ONE...", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "tcpserver help", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Hide firewall ?", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "qmail-qread and qmail-qstat as suid root...", was sent from jessica and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Can't establish SMTP connection (Error 4.4.1)", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Can't establish SMTP connection (Error 4.4.1)", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "I am back to square ONE...", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Very slow qmail response", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "tcpserver help", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "Hide firewall ?", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B (Sophos,Norman) virus. The file is currently Detected. The message, "qmail-qread and qmail-qstat as suid root...", was sent from Forrest Sutton and was discovered in McKenzie, Andrew\#apps\qmail located at Brite/MANCHESTER/ITMAILMAN2.
Achtung Attention don¡¦t open the Attachment !!!!!! > -----Ursprungliche Nachricht----- > Von: jessica [mailto:[EMAIL PROTECTED]] > Gesendet: Montag, 23. April 2001 16:05 > An: [EMAIL PROTECTED] > Betreff: E-MAIL-SCAN:VIRUSWARNUNG! IN ANLAGE~RE: CAN'T ESTABLISH SMTP > CONNECTION (ERROR 4.4.1) > > Dateianlage : Emanuel.exe > Virusname : W32/Navidad.e@M > Ausgefuhrte Aktion : Geloscht... > > > On Fri, Apr 06, 2001 at 12:23:33PM +0200, Frank Tegtmeyer wrote: > > > Any hints what I am missing in my configuration? > > > > Did you restart qmail after establishing the route in smtproutes? > > That's not necessary. smtproutes is reread by every new invocation of > qmail-remote. > > Chris >
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: "qmail mailing list" <[EMAIL PROTECTED]> Subject: Mail cleansing program Message-ID: <015b01c0cbfe$fcb18d00$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:06:04 +0800
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: I am back to square ONE... Message-ID: <015d01c0cbff$0b144270$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:06:28 +0800
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: I am back to square ONE... Date : 23/04/2001 16:30:09 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Fw: How to block an email id in qmail? Message-ID: <015e01c0cbff$10550440$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:06:39 +0800
Ett virus upptäcktes i e-post som var adresserad till dig. Vi har stoppat det infekterade brevet för att din dator inte ska bli smittad. A virus was discovered in an e-mail addressed to you. We have rejected the infected mail so your computer will not be infected. ------------------------------------------------------------------------ The header from the infected e-mail: RCPT TO: [EMAIL PROTECTED] From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Re: Very slow qmail response Message-ID: <015f01c0cbff$176f6810$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:06:50 +0800
I've got a lot of virus infected mails from the qmail-list. Everyone who don't have virus scanning for they e-mails should scann there computer... Andreas
Andreas Grip <[EMAIL PROTECTED]> wrote: > I've got a lot of virus infected mails from the qmail-list. Oddly enough, I've only seen a handful of actual infected messages come through this list. On the other hand, I am practically being mailbombed by virus scanners which have detected these few messages and decided to send notices to the recipients (including the list address). > Everyone who don't have virus scanning for they e-mails should scann there > computer... qmail doesn't run on Windows. I daresay the majority of people on this list are clueful enough to not run vulnerable email clients. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: Fw: How to block an email id in qmail? Date : 23/04/2001 16:39:02 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: Very slow qmail response Date : 23/04/2001 16:44:09 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: Very slow qmail response Date : 23/04/2001 16:54:39 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : Forrest Sutton Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: Very slow qmail response Date : 24/04/2001 05:00:43 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: tcpserver help Date : 23/04/2001 16:49:41 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : Forrest Sutton Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: tcpserver help Date : 24/04/2001 04:57:09 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: Hide firewall ? Date : 23/04/2001 17:04:47 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Wow. I expect my users to not know any better when it comes to virii and attachments. That's the purpose of anti-virus software, filtering, and the other sundry defenses. Consider yourself technical enough to administer a mail server? Then you should know better. Chris, Johan, David, RC, for your reading pleasure: http://vil.mcafee.com/dispVirus.asp?virus_k=98881&; cheers, Todd
On Mon, Apr 23, 2001 at 11:13:38AM -0400, Todd Finney wrote: > Wow. > > I expect my users to not know any better when it comes to virii and > attachments. That's the purpose of anti-virus software, filtering, and > the other sundry defenses. > > Consider yourself technical enough to administer a mail server? Then > you should know better. > > Chris, Johan, David, RC, for your reading pleasure: I do know better. What are you talking about? (I assume I'm the Chris you refer to above, since a message I posted two weeks ago was reinjected with a virus attached. Did it occur to you that it wasn't sent by me?) Chris
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : Re: qmail, qmail-command and procmail Date : 23/04/2001 17:14:18 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
Panda Antivirus a trouvé les virus suivants dans le message : Envoyé par : jessica Adresse : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] Sujet : qmail-qread and qmail-qstat as suid root... Date : 23/04/2001 17:22:52 THIS MESSAGE CONTENT VIRUS !!! Fichier : Emanuel.exe Virus : W32/Navidad.B Renommé http://www.pandasoftware.com
The Virus was reported to be: I-Worm.Navidad.B1 From: "jessica" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: qmail-qread and qmail-qstat as suid root... Message-ID: <017401c0cbff$dd9878b0$0300a8c0@acer345t> Date: Mon, 23 Apr 2001 22:12:18 +0800 He/she/it tries with the subject: qmail-qread and qmail-qstat as suid root.. Re: qmail, qmail-command and procmail Re: Hide firewall ? Re: Very slow qmail response Re: tcpserver help Re: Fw: How to block an email id in qmail? Re: I am back to square ONE... Mail cleansing program Re: Can't establish SMTP connection (Error 4.4.1) Re: Qmail and Procmail Gustav -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net
Gustav-Martin Olsen wrote: > > The Virus was reported to be: > > I-Worm.Navidad.B1 > > From: "jessica" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Subject: qmail-qread and qmail-qstat as suid root... > Message-ID: <017401c0cbff$dd9878b0$0300a8c0@acer345t> > Date: Mon, 23 Apr 2001 22:12:18 +0800 > > He/she/it tries with the subject: > qmail-qread and qmail-qstat as suid root.. > Re: qmail, qmail-command and procmail > Re: Hide firewall ? > Re: Very slow qmail response > Re: tcpserver help > Re: Fw: How to block an email id in qmail? > Re: I am back to square ONE... > Mail cleansing program > Re: Can't establish SMTP connection (Error 4.4.1) > Re: Qmail and Procmail > > Gustav > > -- > GMX - Die Kommunikationsplattform im Internet. > http://www.gmx.net looks like you did your homework... -- Regards, Jason Kawaja, UF-ECE Sys Admin
Hi Harald, thanks for your help and the good information, i've written a little shell-script. best regards Gustav -- GMX - Die Kommunikationsplattform im Internet. http://www.gmx.net
>From http://cr.yp.to/qmail/faq/reliability.html#backups: >How do I back up and restore the queue disk? > >Answer: You can't. > >One difficulty is that you can't get a consistent snapshot of the >queue while qmail-send is running. Stop qmail first. And kick off all the users to prevent new messages from being added to the queue. >Another difficulty is that messages in the queue must have filenames >that match their inode numbers. Run queue-fix after restoring. >However, the big problem is that backups---even hourly backups!---are >far too unreliable for mail. If your disk dies, there will be very >little overlap between the messages saved in the last backup and the >messages that were lost. Restoring an old queue will probably result in redelivering some messages, but it will recover long-undeliverable messages. To me, a few duplicates are worth it to recover lost messages. >There are several ways to add real reliability to a mail server. >Battery backups will keep your server alive, letting you park the >disk to avoid a head crash, when the power goes out. Solid-state >disks have their own battery backups. RAID boxes let you replace dead >disks without losing any data. Yes, UPS's and disks are cheap. -Dave
Greetings, I am looking for instructions on applying big-todo patch. It’s just a test server so I don need to worry about the existing queue. Would appreciate if some could help me or send me the link, which points to the instructions.
Thanks in Advance,
Mehul.
Mehul Choksi <[EMAIL PROTECTED]> wrote: > I am looking for instructions on applying big-todo patch. It’s > just a test server so I don need to worry about the existing queue. If you don't care about the contents of the queue, just stop qmail, remove /var/qmail/queue, cd to the source directory, apply the patch, do a "make setup check", and restart qmail. If you need step-by-step instructions for applying the patch, it's offtopic here. Check a Unix-newbies FAQ or other resource for those. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
"Alan R." wrote: > > Jessica, > > You are sending email with virus. Please use some anti-virus program. > > Alan R. > there is no jessica, investigate the past messages...they originate from various previous posters.... someone on this list has/had a worm/virus and their machine sent messages from its sent-box to past recipients, qmail-list being one of them.. folks on the list who are _still_ using a windows box should go to : http://www.sarc.com/avcenter/venc/data/w32.navidad.16896.html I believe the attached exe is that type of worm. -- Regards, Jason Kawaja, UF-ECE Sys Admin
On Mon, 23 Apr 2001 12:10:10 EDT, Jason Kawaja wrote: > folks on the list who are _still_ using a windows box should go to : Maybe you should refer them to something like: http://www.linuxdoc.org/HOWTO/Installation-HOWTO/index.html or http://www.openbsd.org/faq/faq4.html ;-) Andy
On Mon, Apr 23, 2001 at 12:10:10PM -0400, Jason Kawaja wrote: > "Alan R." wrote: > > > > Jessica, > > > > You are sending email with virus. Please use some anti-virus program. > > > > Alan R. > > > > there is no jessica, investigate the past messages...they originate from > various previous posters.... Wrong. Look at the headers of the messages. This "emanuel" has plagued the qmail list before. I've seen some of my own posts re-posted back then. From what I've seen, the virus re-sends everything the victim has recieved, with the .exe attached to them. RC -- +------------------- | Ricardo Cerqueira | PGP Key fingerprint - B7 05 13 CE 48 0A BF 1E 87 21 83 DB 28 DE 03 42 | Novis Telecom - Engenharia ISP / Rede Técnica | Pç. Duque Saldanha, 1, 7º E / 1050-094 Lisboa / Portugal | Tel: +351 2 1010 0000 - Fax: +351 2 1010 4459
PLEASE, do restrain your antivirus software from spamming the list !! On Mon, 23 Apr 2001, Jason Kawaja wrote: > "Alan R." wrote: > > > > Jessica, > > > > You are sending email with virus. Please use some anti-virus program. > > > > Alan R. > > > > there is no jessica, investigate the past messages...they originate from > various previous posters.... > > someone on this list has/had a worm/virus and their machine sent > messages from its sent-box to past recipients, qmail-list being one of > them.. > > folks on the list who are _still_ using a windows box should go to : > > http://www.sarc.com/avcenter/venc/data/w32.navidad.16896.html > > I believe the attached exe is that type of worm. > > -- > > Regards, > Jason Kawaja, UF-ECE Sys Admin >
Michael Cheung <[EMAIL PROTECTED]> wrote: > Can I use qmail-pop3d for both mbox and maildir format? No, but SolidPOP handles both: http://solidpop3d.pld.org.pl/ -Dave
1. We use multilog with option t s2500000 to the /var/log/qmail/qmail-send and /var/log/qmail/qmail-smtp (same hard drive and partition) - exactly same as mentioned in Adam McKenna's qmail-HOWTO v2 2. The test setup was run exactly same as the production; the only difference was the email- ids were non-existent. 3. Well, I think I misunderstood "sending unique mails Vs sending same mail to different addresses". Well, the application sends unique mails to different addresses with the same contents (the header changes each time since the "rcpt to:" changes in each mail, the body remains same) 4. I have applied the big-todo patch and set the conf-split to 40, we will be running the test later today. (Well, I am not sure whether I have applied it correctly - though I can see the todo directory having 40 sub directories) The only thing I can see now is the disk bandwidth problem, I will have to test it with better disks. Many thanks again for replying. I greatly appreciate the same. Regards, Mehul. -----Original Message----- From: Charles Cazabon [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 19, 2001 12:26 PM To: Qmail (E-mail) Subject: Re: Queue Building Mehul Choksi <[EMAIL PROTECTED]> wrote: > Thanks a lot for the reply. You're welcome. However, in future, could you set your email client up to use standard quoting conventions? The way you quoted my message made it extremely difficult to read and determine which parts you had added. I've fixed the quoting for this reply. > > Do you mean send identical copies of one message to a million users, or send > > one million unique emails, each to one user? The difference is enormous. > It depends, normally in batches of 100,000 to 300,000 identical mails > prepared by an application to be sent to subscribers. Currently we use a > pool of sendmail servers (ordinary PIII 500 with 128MB RAM and IDE). We are > planning to migrate to QMAIL eventually if we find better performance. 100,000 recipients each for 10 unique emails a day is trivial to do with qmail. However, your testing didn't actually test this. You sent thousands of unique messages to one or more recipients each, which is a completely different (and more difficult) queue load. Change your testing methods, and you'll see the difference. > > You may be running into a queue disk bandwidth limitation. What sort of > > hardware are you using? Is the queue on a disk by itself? Is that disk a > > 15kRPM SCSI disk, sitting on its own U160 controller? Is that filesystem > > mounted noatime? What filesystem are you using? What OS? > > > > How are you logging? What does the system load reach while running your > > injection? Have you read the section on large servers at www.qmail.org? > > Is /var/log on a separate disk? > The server we are using is a very ordinary machine with PIII 500, 128MB > and an IDE on Red Hat Linux 6.0 with upgraded kernel. Logging is done > exactly the same way mentioned in the HOWTO. I'm not familiar with the HOWTO you speak of. Does it use splogger to send the logs through syslog? If that's the case, syslog could be eating 90% of your CPU and 90% of your queue disk bandwidth, if the /var/log is on the same filesystem as /var/qmail/queue. You didn't answer any of these questions; we can't help you if you refuse to answer them. Basically, you want to ensure you're logging through multilog, not splogger, and sending the logs to a separate disk than the queue is on, for maximum performance. > We will distribute the load of SMTP using the LVS. The same test we ran on > sendmail with the very similar machine was acceptable - sendmail didn't > build up a huge queue - it processed all the mails. However, It was rather > slow in accepting the message though. But sendmail can be configured to try delivering the mail before queuing it; this is unreliable and can result in lost mail. We know nothing of your sendmail configuration (and probably don't want to know). Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
Mehul Choksi <[EMAIL PROTECTED]> wrote: > 2. The test setup was run exactly same as the production; the only > difference was the email- ids were non-existent. This makes a big difference; the system trying to deliver to non-existent local or remote accounts will spend a lot of additional time and queue disk I/O injecting and delivering bounce messages. > 3. Well, I think I misunderstood "sending unique mails Vs sending same mail > to different addresses". Well, the application sends unique mails to > different addresses with the same contents (the header changes each time > since the "rcpt to:" changes in each mail, the body remains same) Yes, you're sending unique messages to each recipient. This puts a large load on the queue disk. Sending a single message to multiple recipients only requires queuing it once, while your method queues it separately for each recipient. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
On Tue, Apr 10, 2001 at 03:11:43PM -0700, Steve Quezadas wrote: > pcrush.com MX preference = 5, mail exchanger = 63.204.40.234 MXes do _never_ point to IPs, you must use a Hostname. -- Henning Brauer | BS Web Services Hostmaster BSWS | Roedingsmarkt 14 [EMAIL PROTECTED] | 20459 Hamburg http://www.bsws.de | Germany
You know... the virus, I don't mind.... qmail-scanner-queue.pl places it quietly and calmly into the quarantine, sends me and email, and we all get on with our lives. The part that sucks is the hordes of email notices to the list about the virus from every anti-viral program on the list. If you're using qmail scanner, it checks for automated mail and does *not* send a response to the list is the virus came from a list... wouldn't that be nice? Happy Monday! Jer At 09:13 AM 4/23/2001, Todd Finney wrote: >Wow. > >I expect my users to not know any better when it comes to virii and >attachments. That's the purpose of anti-virus software, filtering, and >the other sundry defenses. > >Consider yourself technical enough to administer a mail server? Then you >should know better. > >Chris, Johan, David, RC, for your reading pleasure: > >http://vil.mcafee.com/dispVirus.asp?virus_k=98881&; > >cheers, >Todd >
I'm pleased to announce the first public release of my Tagged Message Delivery Agent (TMDA). If you're familiar with Thomas Erskine's `Tagged Message Sender', TMDA is essentially a re-write with lots of new functionality. TMDA is an OSI certified software application for qmail systems designed to significantly reduce (or eliminate) the amount of SPAM/UCE you receive by using unique, cryptographically enhanced (called tagged) e-mail addresses. TMDA can both filter your incoming e-mail, and tag your outgoing address. For complete information, visit the TMDA homepage: <URL:http://tmda.sourceforge.net/> As a teaser, TMDA has reduced my influx of SPAM from 500+ junk-messages per month down to only 1-3. Enjoy, Jason
i tried something more : sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs show that they bounce back immediately, with a error code 554 and 550 respectively. which is the correct and expected behaviour. No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a 250_ok (remote accepted message) !!! (they should have bounced back). is it that schwab.com, aol.com are delaying the bounce back and sending the bounce back after sending the accept message ...... and my qmail logs when it gets the 250_ok message, doesn't write any other error info into logs for the same message id / delivery id. or maybe qmail-remote closes connection with the remote server after seeing a 250_ok message and thus doesn't get the delayed bounce ??? ( i'm sending the email using "mailto address", and putting a subject with no message body) as you've mentioned : you see the accept message and followed by a bounce. what i could be possibly missing? is it some sort of qmail-remote configuration?? thanks, Ketan ----- Original Message ----- From: "Greg White" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, April 22, 2001 1:43 AM Subject: Re: incorrect_user@correct_domain accepted > On Sat, Apr 21, 2001 at 01:52:54PM -0700, Ketan Bajaj wrote: > > i think i haven't been clear enough in explaining the problem... > > again, > > A (local smtp server) B (remote smtp server) > > > > B is at domain schwab.com, about which i do not know anything, whether it > > has qmail, sendmail, exchange or anything else. > > > > 1. when A is setup as qmail, and remote address is incorrect@B there is no > > bounce from B and the message is accepted at B. I see this at the qmail logs > > on A. > > In sending them a test message, I too see the remote host accept the > message, but it promptly bounces it with '550 User Unknown'. Your qmail > server is likely configured incorrectly -- you should be seeing the > bounces. Please send a message, _headers and all_, that you sent to > [EMAIL PROTECTED] from your qmail server... > > GW
Ketan Bajaj <[EMAIL PROTECTED]> wrote: > sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs show > that they bounce back immediately, with a error code 554 and 550 > respectively. which is the correct and expected behaviour. It's correct, but why is it expected? It's only possible if the process which accepts the message from the net at large has knowledge of the final delivery target. This is the case sometimes, and other times not. > No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a > 250_ok (remote accepted message) !!! (they should have bounced back). qmail-smtpd doesn't have any knowledge of local users. It therefore cannot reject the message during the initial SMTP conversation. It then bounces the message if the local user turns out not to exist. This is all allowed by the SMTP spec. > as you've mentioned : you see the accept message and followed by a bounce. > what i could be possibly missing? is it some sort of qmail-remote > configuration?? No, it's not a configuration issue. You simply don't understand that this is also correct and allowed behaviour, and for obvious reasons, it has to be. There are many network and software configurations which simply make it impossible to "know" during the inital SMTP conversation whether the local part of an address is valid. Charles -- ----------------------------------------------------------------------- Charles Cazabon <[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. -----------------------------------------------------------------------
probably this is what is going wrong: this time i used qmail-remote directly : /var/qmail/bin/qmail-remote schwab.com sender-envelope [EMAIL PROTECTED] qmail-remote exits with the report rK: ***** r Recipient report: acceptance. K Message report: success. host has taken responsibility for delivering the message to each acceptable recipient. ***** Now if sender-envelope address is at my qmail-server, the bounce never comes back. If i change the sender-envelope address to some another address as [EMAIL PROTECTED], a bounce is received at that address!! which may mean either the remote hosts like aol.com and schwab.com are either not able to send the bounce message to the sender-envelope address at my qmail server, which i have been using. (they don't like my server name/ip, but i checked that reverse lookup are fine !) or they are sending the bounce to the envelope, but qmail is not accepting them due to some reasons...... -ketan ----- Original Message ----- From: "Ketan Bajaj" <[EMAIL PROTECTED]> To: "Greg White" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, April 23, 2001 12:26 PM Subject: Re: incorrect_user@correct_domain accepted > i tried something more : > sent messages to bad_user_names @yahoo.com, hotmail.com. My qmail logs show > that they bounce back immediately, with a error code 554 and 550 > respectively. which is the correct and expected behaviour. > No i try again to [EMAIL PROTECTED] and [EMAIL PROTECTED], i get a > 250_ok (remote accepted message) !!! (they should have bounced back). > > is it that schwab.com, aol.com are delaying the bounce back and sending the > bounce back after sending the accept message ...... > and my qmail logs when it gets the 250_ok message, doesn't write any other > error info into logs for the same message id / delivery id. or maybe > qmail-remote closes connection with the remote server after seeing a 250_ok > message and thus doesn't get the delayed bounce ??? > ( i'm sending the email using "mailto address", and putting a subject with > no message body) > > as you've mentioned : you see the accept message and followed by a bounce. > what i could be possibly missing? is it some sort of qmail-remote > configuration?? > thanks, > Ketan > > ----- Original Message ----- > From: "Greg White" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Sunday, April 22, 2001 1:43 AM > Subject: Re: incorrect_user@correct_domain accepted > > > > On Sat, Apr 21, 2001 at 01:52:54PM -0700, Ketan Bajaj wrote: > > > i think i haven't been clear enough in explaining the problem... > > > again, > > > A (local smtp server) B (remote smtp server) > > > > > > B is at domain schwab.com, about which i do not know anything, whether > it > > > has qmail, sendmail, exchange or anything else. > > > > > > 1. when A is setup as qmail, and remote address is incorrect@B there is > no > > > bounce from B and the message is accepted at B. I see this at the qmail > logs > > > on A. > > > > In sending them a test message, I too see the remote host accept the > > message, but it promptly bounces it with '550 User Unknown'. Your qmail > > server is likely configured incorrectly -- you should be seeing the > > bounces. Please send a message, _headers and all_, that you sent to > > [EMAIL PROTECTED] from your qmail server... > > > > GW
> "Meuse, Andy" wrote: > > Hey all, > > A few accounts on my qmail server recieve 1000 emails a day. > Sometimes these don't get checked for weeks. The mail is also kept on the > server for a few weeks so the CUR dir gets pretty massive. > > It's all been running fine for months with no config change, but > now when a user tries to pop the account the cpu% on the server maxes > out. If the user quits Outlook and then starts again, a second pop > process starts on the qmail server and the cpu% splits between them. If I > kill the processes it all just starts again. > > The only way around it I've found is to delete messages from the > CUR dir down to about 1000 or so. > The server is a dual 500 with half a gig of ram and the desktops > are 700s with 256 and the connectivity is not an issue. > > Anyone know of some "tweak" that might help me? Or do y'all need > more info? > > Thanks > Andy I rewrote my pop daemon to only serve 200 messages at once. When there more messages than that I need to make several requests. You might experiment with some internal scaling tool that makes a new directory every few thousand mails and moves all the mail from the MailDir/new directory into the newly created directory, and a pop daemon (again, assuming you are writing your own pop daemon) that knows about this multiple directory arrangement and naming scheme (new+timestamp would work well) That way you could avoid the too-many-entries-in-directory problem tht you appear to be having. -- David Nicol 816.235.1187 [EMAIL PROTECTED] "Described as awesome by users"
-----BEGIN PGP SIGNED MESSAGE----- Charles Cazabon wrote: >I daresay the majority of people on this list >are clueful enough to not run vulnerable email clients. In a quick not-quite-scientific survey of 6,757 messages in my qmail-list folder: pnet4:djb 522 $ grep -i ^X-Mailer: qmail \ |grep -iE 'microsoft|eudora' |wc -l 1757 Which works out to 26% of the traffic. Of course, that doesn't establish the number of unique senders in those figures, but still ... not as small a minority as I would have thought ... - -d - -- David Talkington http://www.spotnet.org PGP key: http://www.prairienet.org/~dtalk/dt000823.asc -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQEVAwUBOuS6J71ZYOtSwT+tAQFPjggApafwdSzS16ZhA6XSvTQ7vrfVXdRajScp EGsKfHGR1yZNd4iuaBe+h2a8kPiTWU9Ryn4a9hMnOqqwxcs0iJleJyT/ncVQiB6q p8WozeGL5iKyifL/pXsgQ1YgXYi8MKrnNmeHZ2xI3dIwY50EEFCjMgXwHDnBAIvt qFT7UuXd+h+YNU1rWxzUn2BarIHvy2fC/YjvWqKiKIbph3BlSo1q2NfsnU4kM1w0 QsAmi9mOHLmQKonl9mgZvrbsWTf9Plt/BYxK+Oyc2iCrv/t1TGk7F+CNbx/gxAa8 pLNHD8Q6a3QMb1M3i9N2cdHxggfljQY2esfM7Alj/WOUuOG9hYmUEQ== =VBnG -----END PGP SIGNATURE-----
Rumor has it that David Talkington may have mentioned these words: >-----BEGIN PGP SIGNED MESSAGE----- > >Charles Cazabon wrote: > >>I daresay the majority of people on this list >>are clueful enough to not run vulnerable email clients. > >In a quick not-quite-scientific survey of 6,757 messages in my >qmail-list folder: > >pnet4:djb 522 $ grep -i ^X-Mailer: qmail \ >|grep -iE 'microsoft|eudora' |wc -l > 1757 > >Which works out to 26% of the traffic. Of course, that doesn't >establish the number of unique senders in those figures, but still ... >not as small a minority as I would have thought ... Just because one runs (for example) Eudora doesn't mean one's not clueful... I run Eudora (3.0 pro) which doesn't open anything you don't want it to, HTML disabled, and Norton Antivirus updated weekly (or so...) I've been running qmail since 0.96 (1995) and while I'm no brain surgeon, I do happen to still have a wee bit of gray matter still functioning... However, in the spirit of this thread, as soon as someone donates some VMS documentation to me (7.2 for the Vax would be preferable, but I won't be too picky... ;-) I'd be more than happy to use my VaxStation 3100/m38 to do my home email -- then I can use a real operating system & not worry about virii... :-) Too bad qmail won't run on it... :-( Just MHO, Roger "Merch" Merchberger -- Roger "Merch" Merchberger --- sysadmin, Iceberg Computers Recycling is good, right??? Ok, so I'll recycle an old .sig. If at first you don't succeed, nuclear warhead disarmament should *not* be your first career choice.
-----BEGIN PGP SIGNED MESSAGE----- Roger Merchberger wrote: >Just because one runs (for example) Eudora doesn't mean one's not clueful... No offense intended. I believe Eudora uses IE's engine if you choose to use HTML mail (which the clueful user won't, of course), and has been affected by IE vulnerabilities for that reason, hence its (perhaps unwarranted) inclusion in my search. - -d - -- David Talkington http://www.spotnet.org PGP key: http://www.prairienet.org/~dtalk/dt000823.asc -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQEVAwUBOuTOtr1ZYOtSwT+tAQFBmQf9GXIwQl54GTzlQobZCWDISizjNXzRw9Bm kM+AIswmM2mdOo2R5E72RIMy7W1D6DHIRMVSE3/IyICcfDjHCaGNIwX/tXeaeWzA 9MXnFQSl7SMjMHbYi6KcEX9TxcHHttCOlIUe0zW2/wz1ZKodPZyuJEfX0vt7WWlS FvObC0J0OvdP4dGLSRy835meV8VY4Liet3DstQ7bjYyvSs/M7sxmtlDKv04+RbCX JXNEAKc7qxcMmBsYW+rsxe2R1+TSSX5rY5JZXmTXdaLjkdI0BFPNgPf8bTCoUZIk HVWHmg/A8WAA+4qRtwwxcAHldoEWGcWtVd8nwu1UkMiqQvl8jg+0Fg== =Sppa -----END PGP SIGNATURE-----
On Mon, 23 Apr 2001, David Talkington wrote: > -----BEGIN PGP SIGNED MESSAGE----- > > Roger Merchberger wrote: > > >Just because one runs (for example) Eudora doesn't mean one's not clueful... > > No offense intended. I believe Eudora uses IE's engine if you choose > to use HTML mail (which the clueful user won't, of course), and has > been affected by IE vulnerabilities for that reason, hence its > (perhaps unwarranted) inclusion in my search. > Well it certainly can't use IE's engine if I have _no_ Microsoft software on my Macintosh. I have been using eudora for 5 years, and have had zero problems. It doesn't execute anything, and it seems to have it's own HTML render engine. If you _do_ know of any documented problems with eudora, please refer me to them. --Pete
-----BEGIN PGP SIGNED MESSAGE----- Peter Cavender wrote: >Well it certainly can't use IE's engine if I have _no_ Microsoft software >on my Macintosh. Indeed. >I have been using eudora for 5 years, and have had zero >problems. It doesn't execute anything, and it seems to have it's own HTML >render engine. Yes ... it was mentioned to me privately that Eudora 3 (which Mr. Mershberger uses) is standalone. If you _do_ know of any documented problems with eudora, >please refer me to them. Methinks this is the sort of thing that came to mind: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=P&S=&P=8505 And, of course, it's a non-issue for the clueful, who don't use HTML mail. - -d - -- David Talkington http://www.spotnet.org PGP key: http://www.prairienet.org/~dtalk/dt000823.asc -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQEVAwUBOuT1db1ZYOtSwT+tAQG7kgf+LNCQhz04dKDK2z7I7ETw91ZtPDoBbPjO ZD+1eTXLyV178n5ffjplnTncJjeaL8TeUJZjSMft60KrA3c1Omc0Mcaib7IbttS3 gq+W3qN4RzwFkkAuqD40FDM1AdF189l3gKgSGgtU8GE+q0i+xCha9/2lUJxd0yx3 9U9+Nz/6ZpqX6PoJ99L98CeqEIFFzBFgcmD76/vqLcKh7clWUaGkOYZC/ht9s4Ax T8jVAkRl3UaMKrWOJx/KPmPLK28PD3bfAOfzDHWlpbbAz6o/aL2EynDzHSBi3LJV jpZ4oJ8TzUV5WntQguxmTEZBnagP4W37mUJ/NK3ETePZ6lW8MfkmhA== =M/rZ -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- David Talkington wrote: >Yes ... it was mentioned to me privately that Eudora 3 (which Mr. >Mershberger uses) is standalone. My apologies for the misspelling, Mr. Merchberger; my excuse is that it's been a 14-hour work day. - -d - -- David Talkington http://www.spotnet.org PGP key: http://www.prairienet.org/~dtalk/dt000823.asc -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.75-6 iQEVAwUBOuT2H71ZYOtSwT+tAQH0DQf/cCzW9+xr0u64a4GObDIwGDFUbkJus7YF buYymMo2ZBJ1h74x8glBlwkbIqmtEaYd8o+MKZGUyi+2h11YH3Nj0t/ECevT6RhP 9kiRQjryGCg7kcWvf/2/mNlQ+4lYswDrwY7mBMGiZbn6JPk/JiGM2AgvWxmxOwTr dibntH8rVm726HoQ+ax3AkO1uEpPEk86VlbrrUn/19bnKpHY2P2kPeGzxTTfztpy 8r3EDsDQ2yIZj6UKWU798LIXdXiDb9IwEWi2krF04yS8XnAlnzH1aAbqqUNcaMDs Vjb6sVhXsllw97I9j10vyF8kcjTfIXP6xSV6znlTvp8bIUgBRe0Jmw== =wLop -----END PGP SIGNATURE-----
> |grep -iE 'microsoft|eudora' |wc -l > 1757 I wonder if it would change some MUA's behaviour or the selection criteria of some IT managers if some big lists/list providers would start to block mail from certain MUAs for self defense. For sure it would bring the lawyers in quickly. Regards, Frank
Hello,sorry to disturb for so stupid questions but I cannot send messages to some mailing list servers: [EMAIL PROTECTED] [EMAIL PROTECTED] The problems started when I passed from qmail SMTP to qmail sendmail to add some features as Mail-Follow-Up. Since I have not a FQDN,to send toward the above mailservers I use smtproutes on this way: vger.kernel.org:mail.myisp.com hydra.carleton.ca:mail.myisp.com but seems that mail doesn't arrives at destination. As test I tried also adding my account @hotmail.com as for above and for this domain smtproutes works. I'am not able to discover where the problem is. It could be setting "sender" into my MUA the problem? Thanks -- Regards,: Marco Calistri <[EMAIL PROTECTED]> gpg key available on http://www.qsl.net/ik5bcu Xfmail 1.4.7p2 on linux RedHat 6.2 kernel-2.4.2 -- I saw Lassie. It took me four shows to figure out why the hairy kid never spoke. I mean, he could roll over and all that, but did that deserve a series?
* Marco Calistri <[EMAIL PROTECTED]> [010424 02:08]: > I use smtproutes on this way: > > vger.kernel.org:mail.myisp.com > hydra.carleton.ca:mail.myisp.com Why not just :mail.myisp.com > but seems that mail doesn't arrives at destination. What do the logs say? > I'am not able to discover where the problem is. With the sparse info you've given, nor are we. -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
On 24-Apr-2001 Johan Almqvist wrote: > * Marco Calistri <[EMAIL PROTECTED]> [010424 02:08]: >> I use smtproutes on this way: >> >> vger.kernel.org:mail.myisp.com >> hydra.carleton.ca:mail.myisp.com > > Why not just >:mail.myisp.com Because the problem appears only on 2 or 3 domains all the other are ok. >> but seems that mail doesn't arrives at destination. > > What do the logs say? Logs says:mail accepted but I never see on the list, I had to use external SMTP server (hotmail from web!) to put my message on list. Using q(mail)sendmail and smtproutes as for above I had this kind of responses: -- Hi. This is the qmail-send program at linux.ik5bcu.ampr.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>: Connected to 199.183.24.194 but sender was rejected. Remote host said: 553 5.4.3 For MAIL FROM address <[EMAIL PROTECTED]> the policy analysis reports DNS error with your source domain. -- >> I'am not able to discover where the problem is. > > With the sparse info you've given, nor are we. Yes Johan you're right btw now I switched back to qmail-SMTP and now the mail goes accepted;I'm sorry because I'd like q(mail)sendmail features to use Mail-Follow-Up that using qmail-SMTP I loose. Marco > -Johan > -- > Johan Almqvist > http://www.almqvist.net/johan/qmail/
* Marco Calistri <[EMAIL PROTECTED]> [010424 02:45]: > >> I use smtproutes on this way: > >> vger.kernel.org:mail.myisp.com > >> hydra.carleton.ca:mail.myisp.com > > Why not just > >:mail.myisp.com > Because the problem appears only on 2 or 3 domains > all the other are ok. Seemingly, your problem is with sender domains in the message and the envelope, not with which SMTP host you use... > Using q(mail)sendmail and smtproutes as for above > I had this kind of responses: > -- > Hi. This is the qmail-send program at linux.ik5bcu.ampr.org. > I'm afraid I wasn't able to deliver your message to the following addresses. > This is a permanent error; I've given up. Sorry it didn't work out. > > <[EMAIL PROTECTED]>: > Connected to 199.183.24.194 but sender was rejected. > Remote host said: 553 5.4.3 For MAIL FROM address > <[EMAIL PROTECTED]> the policy analysis reports DNS error with your > source domain. This is pretty clear, isn't it? Use qmail-inject with the -f option to set the sender to the same thing that your MUA gives to qmail on SMTP... > >> I'am not able to discover where the problem is. > > With the sparse info you've given, nor are we. > Yes Johan you're right btw now I switched back to qmail-SMTP > and now the mail goes accepted;I'm sorry because I'd like > q(mail)sendmail features to use Mail-Follow-Up that > using qmail-SMTP I loose. -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
Hi; I use checkvpw from vmailmgr package for pop3 authorization. But it treat all login name correctuser@incorrectdomain as system-account user. How to configure the vmailmgr to give an error for such a situation? Thanks inadvance. Regards; Michael
ask on the vmailmgr list, this is not a qmail question. Thanks. ----- Original Message ----- From: "Michael Cheung" <[EMAIL PROTECTED]> To: "qmail" <[EMAIL PROTECTED]> Sent: Monday, April 23, 2001 10:18 PM Subject: vmailmgr accpect correctuser@incorrectdomain as system-account user. > Hi; > I use checkvpw from vmailmgr package for pop3 authorization. > But it treat all login name correctuser@incorrectdomain as system-account > user. > > How to configure the vmailmgr to give an error for such a situation? > > Thanks inadvance. > > Regards; > Michael > >
even cucipop is good. Regards Sanjay Singh www.net4india.com hari_bhr wrote: > hi > > you can use vpopmail for all > > ----- Original Message ----- > From: Sajjad Ahmad <[EMAIL PROTECTED]> > To: Mira Tempír <[EMAIL PROTECTED]> > Cc: Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]> > Sent: Monday, April 23, 2001 12:07 PM > Subject: RE: Qmail Authentication > > > I am talking about POP3 Authentication > > > > > > -----Original Message----- > > From: Mira Tempír [mailto:[EMAIL PROTECTED]] > > Sent: Sunday, April 22, 2001 7:34 PM > > To: Sajjad Ahmad > > Cc: Qmail@List. Cr. Yp. To > > Subject: Re: Qmail Authentication > > > > ========= 22/04/01 13:56 by Sajjad Ahmad ========= > > | Dear All, > > | > > | I have Qmail server in my LAN. It is currently getting authentication > > from > > | Microsoft SQL Server on NT. Now I want it authenticate the users from > > local > > | Linux ( Redhat) Passwd file . Can some body help me in this regard, > > | > > > > Autheticate for what ? Pop3 or smtp relaying or somenthing else ??? > > > > -- > > Mira Tempír <[EMAIL PROTECTED]> > > http://www.cekit.cz/ > > _________________________________________________________ > Do You Yahoo!? > Get your free @yahoo.com address at http://mail.yahoo.com
better check virus attached with your mail ----- Original Message ----- From: Forrest Sutton <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Cc: Sajjad Ahmad <[EMAIL PROTECTED]>; Mira Tempír <[EMAIL PROTECTED]>; Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]> Sent: Tuesday, April 24, 2001 7:58 AM Subject: Re: Qmail Authentication > > even cucipop is good. > > Regards > Sanjay Singh > www.net4india.com > > > > hari_bhr wrote: > > > hi > > > > you can use vpopmail for all > > > > ----- Original Message ----- > > From: Sajjad Ahmad <[EMAIL PROTECTED]> > > To: Mira Tempír <[EMAIL PROTECTED]> > > Cc: Qmail@List. Cr. Yp. To <[EMAIL PROTECTED]> > > Sent: Monday, April 23, 2001 12:07 PM > > Subject: RE: Qmail Authentication > > > > > I am talking about POP3 Authentication > > > > > > > > > -----Original Message----- > > > From: Mira Tempír [mailto:[EMAIL PROTECTED]] > > > Sent: Sunday, April 22, 2001 7:34 PM > > > To: Sajjad Ahmad > > > Cc: Qmail@List. Cr. Yp. To > > > Subject: Re: Qmail Authentication > > > > > > ========= 22/04/01 13:56 by Sajjad Ahmad ========= > > > | Dear All, > > > | > > > | I have Qmail server in my LAN. It is currently getting authentication > > > from > > > | Microsoft SQL Server on NT. Now I want it authenticate the users from > > > local > > > | Linux ( Redhat) Passwd file . Can some body help me in this regard, > > > | > > > > > > Autheticate for what ? Pop3 or smtp relaying or somenthing else ??? > > > > > > -- > > > Mira Tempír <[EMAIL PROTECTED]> > > > http://www.cekit.cz/ > > > > _________________________________________________________ > > Do You Yahoo!? > > Get your free @yahoo.com address at http://mail.yahoo.com > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
Hi, I've looked in the qmail FAQ but have not found an answer to my question. I hope someone out there can help me. I have tried creating an alias for the root user on my FreeBSD system, but have noticed that if I put an email address with an underscore in it, such as "[EMAIL PROTECTED]", in the /var/qmail/alias/.qmail- root file, the mail never gets forwarded to that address. But the forwarding seems to works fine with any other address that doesn't contain an underscore. Is this a limitation of the qmail alias mechanism? If so, is there a workaround? If not, what am I doing wrong? Thanks! -Cleo
Have you tried prefixing the email address with & to make sure qmail knows it's an email address to forward to? Can you post logs of what happens when you try emailing root@? __________________ Chris Bolt [EMAIL PROTECTED] http://www.bolt.cx -----Original Message----- From: Cleo Macy [mailto:[EMAIL PROTECTED]] Sent: Monday, April 23, 2001 8:33 PM To: [EMAIL PROTECTED] Subject: .qmail alias file with an underscore in the entry... Hi, I've looked in the qmail FAQ but have not found an answer to my question. I hope someone out there can help me. I have tried creating an alias for the root user on my FreeBSD system, but have noticed that if I put an email address with an underscore in it, such as "[EMAIL PROTECTED]", in the /var/qmail/alias/.qmail- root file, the mail never gets forwarded to that address. But the forwarding seems to works fine with any other address that doesn't contain an underscore. Is this a limitation of the qmail alias mechanism? If so, is there a workaround? If not, what am I doing wrong? Thanks! -Cleo
Thus said ANTIGEN_ITMAILMAN2 on Tue, 24 Apr 2001 03:37:19 BST: > Antigen for Exchange found Emanuel.exe infected with W32/Navidad-B > (Sophos,Norman) virus. Please fix your lame borken anti-virus scanner!!! Andy -- [-----------[system uptime]--------------------------------------------] 9:22pm up 17 days, 37 min, 5 users, load average: 1.04, 1.20, 1.24
When did this list change charter to: "Let's see how many OE/what-ever-wintendo-mailer-with-a-big-hole-in-it-people-are-running users we can infect before list.cr.yp.to grind to a halt just by handling virii-found-letters?" I guess I was a sleep when this happened.... -- Andreas D. Landmark / noXtension An elephant is a mouse with an operating system.
[Replying via webmail...could be messy] Paul, That bug if I remember right was found a little over a year ago. I believe it was patched in vpopmail quite some time ago. Please someone correct me if I am wrong as this is of the _utmost_ importance. As a side note, I had a machine attacked recenly with a pseudo-successful compromise and the only three services that could be seen outside the firewall were proftpd 2.1.0rc3 and qmail SMTP and qpop3D. (ssh was also there) Are best guess right now is that it was an attack from a user who has ssh access on the system...other then that, those three/four ports should not have been the source of the compromise -- certainly not qmail or qpop3d -- maybe proftpd. -- Just a heads up to people... -davidu > Hello everyone, > > I just came across some website stating that > qmail-pop3d + vchkpw contains a particular exploit. > > http://www.ktwo.ca/c/qmail-pop3d-vchkpw.c > > > Has this been patched already? Is it a qmail > problem or a vpopmail problem? > > Rgds, > Paul
Hello, Just a small problem, Not directly related with qmail ..... I would like to know whether I can keep Mail files in maildir in compressed format. I Subscribe to a lot of technical High Volume mailing list (Qmail been one) And would like the lists to be shared by other users. IMAP is but the obvious choice. It also a fact that as these emails are plain text they give extreme high compression ratios. There is some patch available for qmail that does compression/decompression on the fly but this works only with POP. And that still means every one has to download the mails on his / her machine. So one can realize the obvious advantages of using Compression with IMAP. Does any one know of or has tried something similiar ??? Does Courier-IMAP support any such thing ?? Any help or references will be highly appreciated. Thanx & Regards Mustafa M VeetVision Communications (P) Ltd. Bungalow RH-3, Moghul Gardens, 411001 Pune, India Tel. 91-20-6113056, 6051597, 6051598 / Fax 91-20-6050652
Anybody know how to delay failed authentication attempts to prevent brute force pwd cracking on POP3 server using qmail & vpopmail? Sorry for cross posting. Thanks -kittiwat
On Tue, Apr 24, 2001 at 11:48:09AM +0700, Kittiwat Manosuthi wrote: > Anybody know how to delay failed authentication attempts to prevent > brute force pwd cracking on POP3 server using qmail & vpopmail? That is completely useless, because of concurrency. Greetz, Peter.
Hi, You can answer me about Qmail support OSF/Unix (Digital) C2 security ? I cann't checkpassword or authen password pass C2 security. How to about it? Wiroon
