Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread James Stevens
Wait a minute now... Who said anything about straight? --JT - Original Message - From: "Adam McKenna" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 09, 2001 3:03 PM Subject: Re: Netgear RP114 Router doesn't work well with Qmail POP daemon? On

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Adam McKenna
On Mon, Jul 09, 2001 at 11:14:58PM +0200, Lukas Beeler wrote: > as he already said in another posting, it's a 386, and he was mistaken.. Well, I'm sure glad we got that straightened out. --Adam

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread James Stevens
AIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, July 09, 2001 2:14 PM Subject: Re: Netgear RP114 Router doesn't work well with Qmail POP daemon? as he already said in another posting, it's a 386, and he was mistaken.. On Monday 09 July 2001 18:45, Ricardo SIGNES wrote:

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Lukas Beeler
as he already said in another posting, it's a 386, and he was mistaken.. On Monday 09 July 2001 18:45, Ricardo SIGNES wrote: > In a message dated Mon, Jul 09, 2001 at 11:21:35PM +0300, Mike Jackson wrote: > > James Stevens wrote: > > > I had a similar problem however my resolve to it was to

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread James Stevens
uot;Will Yardley" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 09, 2001 1:30 PM Subject: Re: Netgear RP114 Router doesn't work well with Qmail POP daemon? Well if the problem is name resolutions, why not just install bind on the machine itself (in a caching-on

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Ricardo SIGNES
In a message dated Mon, Jul 09, 2001 at 11:21:35PM +0300, Mike Jackson wrote: > James Stevens wrote: > > I had a similar problem however my resolve to it was to take an *OLD* 286 I > > had laying around install a fairly bare installation of Linux on it and Am I getting senile, or is Linux 386+ on

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Chin Fang
I initially thought about it. But upon reviewing the user's report (see the underlined part) I ruled that out. He clearly said that he had his cable modem for a while, and before he got his Netgear RP114, he didn't experience any symptom. That means the reverse lookup was fine with his connecti

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Will Yardley
27;t was I did not want the load of the > DNS service on that machine. > > Cheers, > > --JT > - Original Message - > From: "David Balatero" <[EMAIL PROTECTED]> > To: "Chin Fang" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > Sent: Mo

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Mike Jackson
James Stevens wrote: > > I had a similar problem however my resolve to it was to take an *OLD* 286 I > had laying around install a fairly bare installation of Linux on it and > installed the DNS service. Then I put that online behind my firewall and > added it's IP for port 53 to my NAT/Firewall

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread James Stevens
ng" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, July 09, 2001 11:32 AM Subject: Re: Netgear RP114 Router doesn't work well with Qmail POP daemon? I had a similar problem however my resolve to it was to take an *OLD* 286 I had laying around install a fairly bare insta

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread James Stevens
the load of the DNS service on that machine. Cheers, --JT - Original Message - From: "David Balatero" <[EMAIL PROTECTED]> To: "Chin Fang" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, July 09, 2001 11:08 AM Subject: RE: Netgear RP114 Router does

RE: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread David Balatero
Its quite slow with my Netgear RT314 router as well. -- David Balatero -Original Message- From: Chin Fang [mailto:[EMAIL PROTECTED]] Sent: Monday, July 09, 2001 10:24 AM To: [EMAIL PROTECTED] Subject: Netgear RP114 Router doesn't work well with Qmail POP daemon? I recently have a

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Scott Gifford
Chin Fang <[EMAIL PROTECTED]> writes: [...] > I then asked him to use telnet to port 110 to our POP server, and he > still got the delay. So, I am quite sure it's most likely caused by > the Netgear RP114, although I don't see any reason why this is so. A common cause of this can be your POP s

Re: Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Charles Cazabon
Chin Fang <[EMAIL PROTECTED]> wrote: > I recently have a user reported me the following: > > I recently installed a Netgear RP114 Router, to provide multiple computers > access to the internet via a single cable modem from ATT. Since then, my > Eudora email program encounters some sort of

Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Chin Fang
I recently have a user reported me the following: I recently installed a Netgear RP114 Router, to provide multiple computers access to the internet via a single cable modem from ATT. Since then, my Eudora email program encounters some sort of 30 second delay when attempting to retrieve e

Netgear RP114 Router doesn't work well with Qmail POP daemon?

2001-07-09 Thread Chin Fang
I recently have a user reported me the following: I recently installed a Netgear RP114 Router, to provide multiple computers access to the internet via a single cable modem from ATT. Since then, my Eudora email program encounters some sort of 30 second delay when attempting to retrieve e

Re: migrating from qmail-pop to vpopmail

2001-05-18 Thread Henning Brauer
On Fri, May 18, 2001 at 04:34:18PM +0200, Fabio Pedrazzoli wrote: > I know sqwebmail need vpopmail This isn't true. I'm running sqwebmail with qmail-ldap. -- * Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de * * Roedingsmarkt 14, 20459 Hamburg, Germany * Unix is very simple,

Re: migrating from qmail-pop to vpopmail

2001-05-18 Thread Charles Cazabon
Fabio Pedrazzoli <[EMAIL PROTECTED]> wrote: > > A customer of mine asked me for webmail. He use a qmail-based mailserver > whit about 100 mail virtual-domains. The problem is the virtual domain > handling. > > I know sqwebmail need vpopmail, but on that server virtual domains are > handled in

migrating from qmail-pop to vpopmail

2001-05-18 Thread Fabio Pedrazzoli
Hi guys, straight to the probl.: A customer of mine asked me for webmail. He use a qmail-based mailserver whit about 100 mail virtual-domains. The problem is the virtual domain handling. I know sqwebmail need vpopmail, but on that server virtual domains are handled in the "classic" qmail way, w

Re: qmail-pop* and interface link

2001-03-16 Thread Henning Brauer
On Thu, Mar 15, 2001 at 05:23:19PM +, Subba Rao wrote: > I have qmail-popup and qmail-pop3d running on my system. Is it > possible to dedicate this service to selected interfaces only? > If it can be done, could you please point me to that URL? man tcpserver This is a FAQ. -- Henning Braue

Re: qmail-pop* and interface link

2001-03-15 Thread Mark Delany
On Thu, Mar 15, 2001 at 05:23:19PM +, Subba Rao wrote: > I have qmail-popup and qmail-pop3d running on my system. Is it > possible to dedicate this service to selected interfaces only? > If it can be done, could you please point me to that URL? Read up on tcpserver. That's the program that ac

qmail-pop* and interface link

2001-03-15 Thread Subba Rao
I have qmail-popup and qmail-pop3d running on my system. Is it possible to dedicate this service to selected interfaces only? If it can be done, could you please point me to that URL? Thank you in advance. -- Subba Rao [EMAIL PROTECTED] http://pws.prserv.net/truemax/

Re: qmail POP before SMTP dies unexpected

2001-03-13 Thread Charles Cazabon
Qmaillist <[EMAIL PROTECTED]> wrote: > > > I installed the pop before smtp authentication package, so that the users > > > need to autheticate first before they can send mail. But the problem ist > > > that the readlog & qmail-send die unexpectedly. Then I restart qmail and > > > everything is fi

AW: qmail POP before SMTP dies unexpected

2001-03-13 Thread Qmaillist
] Betreff: Re: qmail POP before SMTP dies unexpected Estephano <[EMAIL PROTECTED]> wrote: > > I installed the pop before smtp authentication package, so that the users > need to autheticate first before they can send mail. > > But the problem ist that the readlog & qmail-send

Re: qmail POP before SMTP dies unexpected

2001-03-13 Thread Charles Cazabon
Estephano <[EMAIL PROTECTED]> wrote: > > I installed the pop before smtp authentication package, so that the users > need to autheticate first before they can send mail. > > But the problem ist that the readlog & qmail-send die unexpectedly. Then I > restart qmail and everything is fine again.

qmail POP before SMTP dies unexpected

2001-03-13 Thread Estephano
Hello. I installed the pop before smtp authentication package, so that the users need to autheticate first before they can send mail. But the problem ist that the readlog & qmail-send die unexpectedly. Then I restart qmail and everything is fine again. Anyone got a clue? Thanks in advance S. W

Re: qmail pop no longer works

2001-01-03 Thread Claudio Nieder
Hi, > ac.d4a.net is being announced in the DNS as 203.164.92.195. Is that > correct? > I can't get a connection to port 25 on that machine -- something is With tcpdump running and telnetting to port 25 of that address I see: 12:37:54.262380 ubr1-pos1-0.mirnd1.nsw.optushome.com.au > dog.eschle.c

Re: qmail pop no longer works

2001-01-03 Thread James Raftery
On Wed, Jan 03, 2001 at 03:07:46AM -0800, Justin Cunningham wrote: > the domain is ac.d4a.net. I am just really confused because it only > happened over new years eve, and the computer running qmail was not > even touched over that period. it worked flawlessly before then ac.d4a.net is being anno

Re: qmail pop no longer works

2001-01-03 Thread Justin Cunningham
10:58:00 + >From: James Raftery <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: qmail pop no longer works > >On Wed, Jan 03, 2001 at 02:43:35AM -0800, Justin Cunningham wrote: >> the person that sends it gets those "warning: message undelivered for >

Re: qmail pop no longer works

2001-01-03 Thread James Raftery
On Wed, Jan 03, 2001 at 02:43:35AM -0800, Justin Cunningham wrote: > the person that sends it gets those "warning: message undelivered for > 4 hours" type messages Hi, It seems that something is blocking incoming SMTP traffic to your mail server. The warning messages you mention should give som

qmail pop no longer works

2001-01-03 Thread Justin Cunningham
Ok this is wierd. after new years eve, i can no longer receive mail that is sent to me remotely through my qmail server. i.e i can send myself and others on my network email, but noone can receive mail that is sent from elsewhere on the net, the mail just does not show up, and the person that s

Re: Problem mit qmail-pop

2000-11-08 Thread Gjermund Sorseth
> I habe a problem with qmail-pop. The users Maildir exist > and new Mail will be delivered properly. > > This shows the local telnetsession on pop3: > > Connected to localhost. > Escape character is '^]'. > +OK

Re: Problem mit qmail-pop

2000-11-08 Thread Michael Maier
Ruprecht Helms wrote: > -ERR this user has no $HOME/Maildir This means the User has no Mail Directory! Maildir => /home/$USER/Maildir The deeper Maildir Structure: Maildir/cur Maildir/new Maildir/tmp That Directories must be present and must have the working Rights to Access!! CU -- --^..^---

Problem mit qmail-pop

2000-11-08 Thread Ruprecht Helms
Hi, I habe a problem with qmail-pop. The users Maildir exist and new Mail will be delivered properly. This shows the local telnetsession on pop3: mail:~ # telnet localhost pop3 Trying ::1... telnet: connect to address ::1: Connection refused Trying 127.0.0.1... Connected to localhost. Escape

Re: qmail pop

2000-09-13 Thread Dave Sill
"James Shelby" <[EMAIL PROTECTED]> wrote: >So far qmail has been easy to install with the exception of the pop service. >I have the 110 port open and it does function however it states this user >has no $HOME/Maildir when in fact the Maildir does exist in the /home/user >directory. Is it really

Re: qmail pop

2000-09-13 Thread Chris Johnson
On Tue, Sep 12, 2000 at 09:27:40PM -0600, James Shelby wrote: > Thanks Dale, still no luck...same error message. Here is a little more > information that might tell someone that I have it configured wrong... First, did you try changing your inetd.conf file as in my previous post? Did you HUP in

RE: qmail pop

2000-09-12 Thread James Shelby
that goes to the /home/johnd/Mailbox Does any of this sound like a misconfiguration? Thanks James -Original Message- From: Dale Miracle [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 12, 2000 9:12 PM To: 'Chris Johnson' Cc: James Shelby; [EMAIL PROTECTED] Subject: Re:

Re: qmail pop

2000-09-12 Thread Dale Miracle
'Chris Johnson' wrote: > > On Tue, Sep 12, 2000 at 08:37:17PM -0600, James Shelby wrote: > > In the inetd.conf file I have > > > > pop-3 stream tcp nowait root/var/qmail/bin/qmail-popup > > mail.mydomain.com /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir > > I hardly use inetd

Re: qmail pop

2000-09-12 Thread 'Chris Johnson'
On Tue, Sep 12, 2000 at 08:37:17PM -0600, James Shelby wrote: > In the inetd.conf file I have > > pop-3 stream tcp nowait root/var/qmail/bin/qmail-popup > mail.mydomain.com /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir I hardly use inetd for anything, so I'm no expert, but I

RE: qmail pop

2000-09-12 Thread James Shelby
applications pointing to the addresses. James -Original Message- From: Chris Johnson [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 12, 2000 8:31 PM To: James Shelby Cc: [EMAIL PROTECTED] Subject: Re: qmail pop On Tue, Sep 12, 2000 at 06:11:32PM -0600, James Shelby wrote: > So far qmail

Re: qmail pop

2000-09-12 Thread Chris Johnson
On Tue, Sep 12, 2000 at 06:11:32PM -0600, James Shelby wrote: > So far qmail has been easy to install with the exception of the pop service. > I have the 110 port open and it does function however it states this user > has no $HOME/Maildir when in fact the Maildir does exist in the /home/user > d

qmail pop

2000-09-12 Thread James Shelby
Hi All, well being the newbie on this list and new to qmail I figure I would start off with the typical how do I question and see what kind of experts we have on here. :) So far qmail has been easy to install with the exception of the pop service. I have the 110 port open and it does function ho

Re: qmail + pop

2000-07-20 Thread Gjermund Sorseth
> Jasper Jans <[EMAIL PROTECTED]>: > > and does anyone know if there is > pop software available that does not reply on /etc/passwd > or /etc/shadow for password authentication but uses an other file? > > The reason for this is - I want to create many (10k+) email

qmail + pop

2000-07-20 Thread Jasper Jans
Hi.. I was wondering - what does qmail reply on to deliver email for user authentication (valid username etc) so you dont end up with mails bouncing - and does anyone know if there is pop software available that does not reply on /etc/passwd or /etc/shadow for password authentication but uses an

RE: ERR Authorization failed w/qmail-pop (New)

2000-07-16 Thread James Phillips
MAIL PROTECTED]] >Sent: Sunday, July 16, 2000 2:44 PM >To: [EMAIL PROTECTED] >Subject: ERR Authorization failed w/qmail-pop > > >I have setup qmail+qmailadmin with all associated packages. I have set up a >few accounts via qmailadmin and am able to send messages with

RE: ERR Authorization failed w/qmail-pop (New)

2000-07-16 Thread Hubbard, David
m: James Phillips [mailto:[EMAIL PROTECTED]] Sent: Sunday, July 16, 2000 2:44 PM To: [EMAIL PROTECTED] Subject: ERR Authorization failed w/qmail-pop I have setup qmail+qmailadmin with all associated packages. I have set up a few accounts via qmailadmin and am able to send messages with out a problem

ERR Authorization failed w/qmail-pop

2000-07-16 Thread James Phillips
I have setup qmail+qmailadmin with all associated packages. I have set up a few accounts via qmailadmin and am able to send messages with out a problem. Now I want to use pop3 to get messages from qmail. I have qmail-pop running as I used the example in #12 of INSTALL in vpopmail package

Re: Problem with Qmail-pop-3 and vpopmail

2000-07-09 Thread Steffan Hoeke
effan > > On Sun, Jul 09, 2000 at 08:29:04PM +0300, buqtraq list wrote: > > > hi again > > > > > > Well I have installed now qmail pop-3 and vpopmail, but now I tried > > > to read my mails via pop3 mailreader. > > > After I logged on entered login

Re: Problem with Qmail-pop-3 and vpopmail

2000-07-09 Thread buqtraq list
eke wrote: > > > Hi, > > > > Try 'man qmail-pop3d' :-) > > > > qmail-pop3d doesn't support mbox type mailboxes. > > It only supports Maildir > > > > HTH, > > Steffan > > On Sun, Jul 09, 2000 at 08:29:04PM +0300, buqtraq lis

Re: Problem with Qmail-pop-3 and vpopmail

2000-07-09 Thread buqtraq list
type mailboxes. > It only supports Maildir > > HTH, > Steffan > On Sun, Jul 09, 2000 at 08:29:04PM +0300, buqtraq list wrote: > > hi again > > > > Well I have installed now qmail pop-3 and vpopmail, but now I tried > > to read my mails via pop3 mailread

Re: Problem with Qmail-pop-3 and vpopmail

2000-07-09 Thread Steffan Hoeke
Hi, Try 'man qmail-pop3d' :-) qmail-pop3d doesn't support mbox type mailboxes. It only supports Maildir HTH, Steffan On Sun, Jul 09, 2000 at 08:29:04PM +0300, buqtraq list wrote: > hi again > > Well I have installed now qmail pop-3 and vpopmail, but now I trie

Problem with Qmail-pop-3 and vpopmail

2000-07-09 Thread buqtraq list
hi again Well I have installed now qmail pop-3 and vpopmail, but now I tried to read my mails via pop3 mailreader. After I logged on entered login/passwd. The program gave me dialog: 'The mail server responded: this user has no $HOME/Maildir. Please enter a new password' seems

Re: qmail & pop-3 w/mbox format

2000-05-24 Thread Peter van Dijk
On Wed, May 24, 2000 at 08:19:13PM +0400, Mikhail Kuzminsky wrote: [snip] > Is there some other pop-3/imap daemons which can work > succesfully in cooperation w/qmail ? Sure, lots of 'm. http://freshmeat.net/appindex/daemons/pop3.html should be helpful. Greetz, Peter. -- [EMAIL PROTECTED] - Pe

qmail & pop-3 w/mbox format

2000-05-24 Thread Mikhail Kuzminsky
Dear netters, we are using qmail 1.03 (instead of sendmail) on SGI O2. Qmail is configured to work w/mbox format (binmail for local delivery to /var/mail/user). We want to install pop-3 (or imap) daemon on this workstation. Unfortunately qmail-pop3d opereates only w/Maildir format. Is there

qmail - pop - autorization problem

2000-05-18 Thread Sinisa Malesevic
I'm using the following command to start the pop daemon: tcpserver -v 0 pop3 /var/qmail/bin/qmail-popup mail.drmail.com.br \ /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1 | \ /var/qmail/bin/splogger pop &But, when I try to get message via Netscape Messanger i get this:" Netscape:

Re: RH62 running Qmail + pop + imap, cliënts use outlook

2000-04-28 Thread Stefan Paletta
Jeroen ten Berge wrote/schrieb/scribsit: Please, keep your lines around 70 characters max, thanks. > auto-reply and auto-forward message's I'm fucked cause I have to > enable it on the linux-box, is there a tool for windows that would > make life easier ? I did this yesterday to enable configu

RH62 running Qmail + pop + imap, cliënts use outlook

2000-04-28 Thread Jeroen ten Berge
Hello dear readers, my co-workers are not very bright PC users, so I can't let them play in linux cause that would be weird for them (you know, no mouse and windows, only those weird characters ;) ), but they can work around in outlook a bit, but anytime some-one goes on holiday and needs to a

Problems with qmail-pop

2000-03-07 Thread Alberto Ladron
Hi: I followed the virtual-accounts howtro from Jedy to the letter, but Ie a problem. My hostname is: perseo.dce.net.mx I start qmail-pop from inetd a sfollows: pop-3 stream tcp nowait root/usr/sbin/tcpd/var/qmail/bin/qmail-popup perseo.dce.net.mx /usr/bin/checkpoppasswd

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-27 Thread Peter Haworth
Pavel Kankovsky wrote: > On Wed, 26 Jan 2000, Russell Nelson wrote: > > > > 2. qmail-send is run as root? > > > > Yup. Well, qmail-start is run as root. Along the line it gives up > > its rootness, becoming qmail-send, and leaving only qmail-lspawn > > running as root. > > Login is run as ro

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Mads E Eilertsen
On Wed, 26 Jan 2000, Petr Novotny wrote: [...] Everyone will suggest you to ditch splogger > and use cyclog instead. Well, cyclog is already history for some of us. :-) History: BigBang -> syslog -> splogger -> cyclog -> multilog Mads

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Pavel Kankovsky
On Wed, 26 Jan 2000, Russell Nelson wrote: > > 2. qmail-send is run as root? > > Yup. Well, qmail-start is run as root. Along the line it gives up > its rootness, becoming qmail-send, and leaving only qmail-lspawn > running as root. Login is run as root. It switches to my privs and execs my

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Petr Novotny
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26 Jan 00, at 11:10, Russell Nelson wrote: > > > Maybe. Maybe not. But splogger isn't a setuid program and needn't be > > > run as root (unlike qmail-send). > > > > 1. qmail-popup is a setuid program? > > No, howeer syslog is often used by

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Russell Nelson
Pavel Kankovsky writes: > On Wed, 26 Jan 2000, Russell Nelson wrote: > > > Maybe. Maybe not. But splogger isn't a setuid program and needn't be > > run as root (unlike qmail-send). > > 1. qmail-popup is a setuid program? No, howeer syslog is often used by daemons, and some daemons run

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Pavel Kankovsky
On Wed, 26 Jan 2000, Russell Nelson wrote: > Maybe. Maybe not. But splogger isn't a setuid program and needn't be > run as root (unlike qmail-send). 1. qmail-popup is a setuid program? 2. qmail-send is run as root? --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Russell Nelson
Derek Callaway writes: > What about the calls to syslog in qmail's splogger.c? Are they secure? Maybe. Maybe not. But splogger isn't a setuid program and needn't be run as root (unlike qmail-send). -- -russ nelson <[EMAIL PROTECTED]> http://russnelson.com Crynwr sells support for free soft

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Petr Novotny
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26 Jan 00, at 10:49, Derek Callaway wrote: > > I don't recommend applying that patch. Every line of it is wrong. It > > makes qmail-popup less secure, by inserting a call to syslog(), which > > is a security disaster. It also sucks in the string

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-26 Thread Derek Callaway
On Sun, 23 Jan 2000, Russell Nelson wrote: > > 5. Recommendation > > > > Impose the 40 character limitation specified by RFC1939 into qmail. > > Apply qmail-popup patch http://www.ktwo.ca/c/qmail-popup-patch > > I don't recommend applying that patch. Every line of it is wrong. It > makes

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Russ Allbery
Giles Lean <[EMAIL PROTECTED]> writes: > syslogd is not quality software. There are various efforts underway to > write replacements, including of course Dan's tools. People committed > to syslog() style interfaces might want to look at: > http://www.ietf.org/ietf/99nov/syslog-agenda-99nov.txt

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread what's your style?
I only supply this sample patch because there is not one from the author. It is not designed to be in the same style of qmail code, for instance, I included a comment. Also, it is a great idea to impose the limitation on vpopmail aswell. Thanks. K2 PS. I dont believe there is a "sprintf()" i

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Giles Lean
On 24 Jan 2000 05:38:20 -0800 Russ Allbery wrote: > That's just for starters. To be fair, current syslog on *most* Unix > systems is now pretty solid except for occasionally losing messages. But > among the problems I've seen or heard of in different > implementations: Also, depending on the

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Robert Varga
On Mon, 24 Jan 2000, iv0 wrote: > Robert Varga wrote: > > > > On Sun, 23 Jan 2000, iv0 wrote: > > > > > > > > I recommend upgrading to the latest version of vpopmail which fixes > > > the exploit. Pick up the current stable version: > > > > So it is fixed from version 3.4.11? > > > > Robert

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread iv0
Robert Varga wrote: > > On Sun, 23 Jan 2000, iv0 wrote: > > > > > I recommend upgrading to the latest version of vpopmail which fixes > > the exploit. Pick up the current stable version: > > So it is fixed from version 3.4.11? > > Robert Varga Yes, version 3.4.11j as of Jan 20th has the fix.

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Ian Lance Taylor
From: Russell Nelson <[EMAIL PROTECTED]> Date: Sun, 23 Jan 2000 22:53:31 -0500 (EST) > 5. Recommendation > > Impose the 40 character limitation specified by RFC1939 into qmail. > Apply qmail-popup patch http://www.ktwo.ca/c/qmail-popup-patch I don't recommend applying t

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Robert Varga
On Sun, 23 Jan 2000, iv0 wrote: > > I recommend upgrading to the latest version of vpopmail which fixes > the exploit. Pick up the current stable version: So it is fixed from version 3.4.11? Robert Varga

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Russ Allbery
Russell Nelson <[EMAIL PROTECTED]> writes: > Securing vchkpop. There is no reason to limit the username or password > information to 40 characters, even if the RFC does say to do it. That's not what the RFC says. The RFC says that the *client* shall not send arguments in excess of 40 character

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-24 Thread Russ Allbery
Russell Nelson <[EMAIL PROTECTED]> writes: > Derek Callaway writes: >> Curious, what's so insecure about syslog()? > A version was subject to a buffer overflow attack. That's just for starters. To be fair, current syslog on *most* Unix systems is now pretty solid except for occasionally losing

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Chris Johnson
> Keywords are three or four characters long. Each argument > may be up to 40 characters long. qmail-popup's accepting arbitrarily long arguments doesn't constitute "nonconformance to the pop3 specification." A client sending more than a 40-character argument is non-conformant; qmail-popup has on

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Russell Nelson
Derek Callaway writes: > Curious, what's so insecure about syslog()? A version was subject to a buffer overflow attack. > > is a security disaster. It also sucks in the string library, which > > includes the well-known security hole sprintf(). > > Does that sprintf() introduce an overflow

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Russell Nelson
Adam McKenna writes: > In that case, what would you recommend? Securing vchkpop. There is no reason to limit the username or password information to 40 characters, even if the RFC does say to do it. -- -russ nelson <[EMAIL PROTECTED]> http://russnelson.com Crynwr sells support for free softw

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread iv0
I recommend upgrading to the latest version of vpopmail which fixes the exploit. Pick up the current stable version: http://www.inter7.com/vpopmail/ vchkpw - which authenticates a user with information from qmail-pop up was storing the information in a staticly defined buffer. There was no

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Adam McKenna
In that case, what would you recommend? --Adam On Sun, Jan 23, 2000 at 10:53:31PM -0500, Russell Nelson wrote: > > 5. Recommendation > > > > Impose the 40 character limitation specified by RFC1939 into qmail. > > Apply qmail-popup patch http://www.ktwo.ca/c/qmail-popup-patch > > I don't re

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Derek Callaway
On Sun, 23 Jan 2000, Russell Nelson wrote: > > 5. Recommendation > > > > Impose the 40 character limitation specified by RFC1939 into qmail. > > Apply qmail-popup patch http://www.ktwo.ca/c/qmail-popup-patch > > I don't recommend applying that patch. Every line of it is wrong. It > makes

Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread Russell Nelson
> 5. Recommendation > > Impose the 40 character limitation specified by RFC1939 into qmail. > Apply qmail-popup patch http://www.ktwo.ca/c/qmail-popup-patch I don't recommend applying that patch. Every line of it is wrong. It makes qmail-popup less secure, by inserting a call to syslog(),

remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

2000-01-23 Thread John Gonzalez/netMDC admin
To: [EMAIL PROTECTED] Subject: remote root qmail-pop with vpopmail advisory and exploit with patch w00w00 Security Advisory - http://www.w00w00.org/ Title: qmail-pop3d with vpopmail/vchkpw Platforms: Any Discovered: 7th January, 2000 Local: Yes. Remote:

FW: remote root qmail-pop with vpopmail advisory and exploit with patch

2000-01-23 Thread Robert Wojciechowski Jr.
Saw this on buqtraq, may be interesting for those running vpopmail/vchkpw Robert S. Wojciechowski Jr. [EMAIL PROTECTED] -Original Message- From: what's your style? [mailto:[EMAIL PROTECTED]] Sent: Saturday, January 22, 2000 7:05 PM To: [EMAIL PROTECTED] Subject: remote root qmai

Re: qmail pop srvice

1999-10-08 Thread courtney
Sam wrote: -- "Security is not a state, but a process." There is no such thing as security- only different levels of user capabilities. Bernie Courtney Z100 New York Engineering mailto:[EMAIL PROTECTED]

Re: qmail pop srvice

1999-10-08 Thread Sam
On Sat, 9 Oct 1999, Gustavo V G C Rios wrote: > Ano question still keep on: Is there any place to get a tutorials on > checkpassword internals ? checkpassword.c would probably be a very good start. It's not like there's a lot of code there. Look yourself, and figure out how it works.

Re: qmail pop srvice

1999-10-08 Thread Gustavo V G C Rios
Sam wrote: > > On Fri, 8 Oct 1999, Gustavo V G C Rios wrote: > > > Why qmail pop3 service is so slow? > > > > I have been using cucipop, and it's ast, very very fast! > > After i decide to switch to Maildir i had to go through qmail-pop3d, and > > now, things are not as fast as it used to be (i

Re: qmail pop srvice

1999-10-08 Thread Sam
On Fri, 8 Oct 1999, Gustavo V G C Rios wrote: > Why qmail pop3 service is so slow? > > I have been using cucipop, and it's ast, very very fast! > After i decide to switch to Maildir i had to go through qmail-pop3d, and > now, things are not as fast as it used to be (i talk only about pop3 > serv

qmail pop srvice

1999-10-08 Thread Gustavo V G C Rios
Why qmail pop3 service is so slow? I have been using cucipop, and it's ast, very very fast! After i decide to switch to Maildir i had to go through qmail-pop3d, and now, things are not as fast as it used to be (i talk only about pop3 service). CAn anyone here explain me what is the difference be

Re: qmail-pop newbie security

1999-09-27 Thread Patrick Berry
On 9/27/99 at 4:49 PM, [EMAIL PROTECTED] (Joshi, Vivek) wrote: > Q1. I read somewhere the pop3 clients don't use encrypted passwords, is > there a way to implement increased security in this case ? Yes, but you need to make sure the clients can handle the kind of authentication you want to use.

qmail-pop newbie security

1999-09-27 Thread Joshi, Vivek
Hi, I am new to linux and have recently setup qmail on a Redhat(6.0 kernel-2.2.12) system. I followed the instructions in lwq and the system is working fine. I use the qmail-pop server, the mail folder used is Maildir For increased security i have commented out most of the services in inetd.conf