Re: Spamassassin plugin: Can't call method ... on an undefined value

2016-08-10 Thread Charlie Brady
On Wed, 27 Jul 2016, markus schnalke wrote: > Hoi, > > I'm using qpsmtpd and am quite happy with it. Now I encountered > a problem, when someone sent a message with an (as the sender > said) empty body to me. You might want to look at:

Re: Spamassassin plugin: Can't call method ... on an undefined value

2016-08-04 Thread Charlie Brady
On Thu, 4 Aug 2016, markus schnalke wrote: > [2016-08-03 16:38] Charlie Brady <charlieb-qpsm...@budge.apana.org.au> > > On Wed, 27 Jul 2016, markus schnalke wrote: > > > > > > I'm using qpsmtpd from the Debian package version 0.84-9. > > > >

Re: Spamassassin plugin: Can't call method ... on an undefined value

2016-08-03 Thread Charlie Brady
On Wed, 27 Jul 2016, markus schnalke wrote: > I'm using qpsmtpd from the Debian package version 0.84-9. I think you should be reporting your problem to the Debian bug tracker.

CVE-2015-0235 exposure via qpsmtpd?

2015-01-28 Thread Charlie Brady
As you can see in the advisory: http://www.openwall.com/lists/oss-security/2015/01/27/9 exim allows remote exploit of a buffer overflow in glibc. Has anybody done an analysis of qpsmtpd to see whether there is a code path via qpsmtpd (and plugins) and perl which allows the same exploit?

Re: qpsmtpd-async weird ParaDNS lookup problem

2014-07-19 Thread Charlie Brady
On Fri, 18 Jul 2014, David Favor wrote: What's the actual problem you are trying to solve though? Problem is ParaDNS is failing on all lookups for this server. ... Notice the there lines with prepended '' which show ParaDNS failing. Perhaps you should be looking for assistance on a

Re: Yahoo's DMARC debacle

2014-04-28 Thread Charlie Brady
On Sun, 27 Apr 2014, Matt Simerson wrote: and are dealing with the fallout. I dealt with the fallout on my mailing lists in May of 2013: http://matt.simerson.net/news/2013/05/01/dkim-and-mailing-lists Your fix: cd path/to/ezmlm/list; rm prefix text/trailer addtrailer doesn't

Re: Yahoo's DMARC debacle

2014-04-28 Thread Charlie Brady
On Sun, 27 Apr 2014, Matt Simerson wrote: If you're operating a mailing list, you have 3 choices: 1. Don't break DKIM 2. If you insist upon breaking DKIM by adding subject prefixes and message trailers, take ownership of the message by changing the From address to your own domain.

Re: Yahoo's DMARC debacle (fwd)

2014-04-28 Thread Charlie Brady
I'm guessing that Matt didn't intend this information to be private to me. -- Forwarded message -- Date: Mon, 28 Apr 2014 09:45:55 -0700 From: Matt Simerson m...@tnpi.net To: Charlie Brady charlieb-qpsm...@budge.apana.org.au Subject: Re: Yahoo's DMARC debacle On Apr 28, 2014

Re: Yahoo's DMARC debacle

2014-04-28 Thread Charlie Brady
On Mon, 28 Apr 2014, Matt Simerson wrote: So either DKIM isn't relevant, or something else in my qpsmtpd/qmail/ezmlm-idx chain is breaking DKIM. Any suggestions? If ezmlm isn't adding a list prefix or message trailers, then it's unlikely that ezmlm is breaking the messages DKIM

Re: Yahoo's DMARC debacle (fwd)

2014-04-28 Thread Charlie Brady
On Mon, 28 Apr 2014, Matt Simerson wrote: On Apr 28, 2014, at 10:57 AM, Charlie Brady charlieb-qpsm...@budge.apana.org.au wrote: I'm guessing that Matt didn't intend this information to be private to me. Correct, but perl.org is rejecting all messages from domains with DMARC p=reject

Yahoo's DMARC debacle

2014-04-27 Thread Charlie Brady
I'm sure that many of you know about this: http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html and are dealing with the fallout. I'm interested to know what people are doing about it. Does anyone have working plugins? I've seen suggestions about rewriting From addresses, and

Re: Yahoo's DMARC debacle

2014-04-27 Thread Charlie Brady
On Sun, 27 Apr 2014, Charlie Brady wrote: I'm sure that many of you know about this: http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html Here's a very clear explanation of how the problem manifests: http://www.ietf.org/mail-archive/web/ietf/current/msg87436.html

Re: Transport encryption in Received: header

2012-08-20 Thread Charlie Brady
On Sun, 19 Aug 2012, Devin Carraway wrote: This was reported as Debian bug#684571 (http://bugs.debian.org/684571): When TLS is in use, qpsmtpd creates a Received header of the form Received: from 87.114.148.171.plusnet.thn-ag1.dyn.plus.net (HELO george.localnet) (87.114.148.171)

Re: [PATCH] Accept messages with no body and no trailing \n after headers

2012-08-13 Thread Charlie Brady
that your qpsmtpd-dev might not become qpsmtpd-0.85 any time soon. BTW, http://smtpd.develooper.com/get.html could be corrected. A new release every 3-9 months is no longer typical. The 'browse the repository' link is also 404. Matt On Jul 20, 2012, at 10:37 AM, Charlie Brady wrote

Re: [PATCH] Accept messages with no body and no trailing \n after headers

2012-07-20 Thread Charlie Brady
On Sat, 25 Feb 2012, Robin H. Johnson wrote: I'm reopening this thread as I independently ran into it today, and I still don't see it in the Git repo. I still don't see it in the Git repo: https://github.com/smtpd/qpsmtpd/blob/master/lib/Qpsmtpd/SMTP.pm It's nearly a year now since Jared

Re: new plugin: helo

2012-06-15 Thread Charlie Brady
On Wed, 13 Jun 2012, Matt Simerson wrote: https://github.com/smtpd/qpsmtpd/pull/29 Make sure the HELO hostname has an A or record that matches the senders IP address, and make sure that the senders IP has a PTR that resolves to the HELO hostname. This might sound pedantic, but since

Re: new plugin: helo

2012-06-15 Thread Charlie Brady
On Wed, 13 Jun 2012, Matt Simerson wrote: https://github.com/smtpd/qpsmtpd/pull/29 I consider this statement to be troublesome also: Per RFC 2821, the HELO hostname must be the FQDN of the sending server or address literal. RFC 2821 doesn't say must. It says neither should nor must, but

Re: new plugin: helo

2012-06-15 Thread Charlie Brady
On Fri, 15 Jun 2012, Matt Simerson wrote: In my experience, reverse DNS is frequently managed (or, frequently, not managed) by an ISP, not by the admin of the mail server. In my experience, every ISP that provides clients with dedicated IPs also provides the client with the ability to

Re: validating from

2012-06-04 Thread Charlie Brady
On Sat, 2 Jun 2012, Matt Simerson wrote: Is it a good idea to validate that the MAIL FROM address is the same as the From: header in the message? What exceptions need to be made, if any? What problems might I encounter if I were to do this? For starters, you would penalise this

Re: [PATCH] connection_time: make compatible with tcpserver deployment

2012-06-04 Thread Charlie Brady
On Sun, 3 Jun 2012, Matt Simerson wrote: --- plugins/connection_time | 18 ++ 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/plugins/connection_time b/plugins/connection_time index bfac4d2..9cff7f9 100644 --- a/plugins/connection_time +++

Re: validating from

2012-06-04 Thread Charlie Brady
On Mon, 4 Jun 2012, Matt Simerson wrote: On Jun 4, 2012, at 9:26 AM, Charlie Brady wrote: On Sat, 2 Jun 2012, Matt Simerson wrote: Is it a good idea to validate that the MAIL FROM address is the same as the From: header in the message? ... Also wouldn't work well for mailing

Re: [PATCH] unrecognized_commands: better log messages

2012-06-04 Thread Charlie Brady
On Mon, 4 Jun 2012, Matt Simerson wrote: +my $count = $self-connection-notes('unrec_cmd_count') || 0; + $self-connection-notes('unrec_cmd_count', ++$count ); Which does increment correctly. This also works (note the parens), which is how it was done

Re: Prevent plugins from running forever (Re: A basket of changes)

2012-05-25 Thread Charlie Brady
. http://www.mail-archive.com/qpsmtpd@perl.org/msg06534.html Matt On May 18, 2012, at 9:45 AM, Charlie Brady wrote: Maybe I've missed it in the flurry of patches, but I still see no sign of timeouts being enforced across plugins. http://grokbase.com/p/perl/qpsmtpd/097nr0gyr2

Re: new plugin: naughty nice

2012-05-25 Thread Charlie Brady
On Thu, 24 May 2012, Matt Simerson wrote: I have written a plugin that is currently named naughty. The POD has a good description of what it does and how it works. You can read the POD here: https://www.tnpi.net/internet/mail/naughty.html The plugin is very effective at blocking

Re: [PATCH 3/7] basicheaders, add reject option, loglevel

2012-05-18 Thread Charlie Brady
I think the documentation of the reject option could be clearer. What value of the parameter should be used when first using this plugin? I think reject 0. On Fri, 18 May 2012, Matt Simerson wrote: added reject option document the existence of the loglevel option ---

Re: [PATCH 3/7] basicheaders, add reject option, loglevel

2012-05-18 Thread Charlie Brady
On Fri, 18 May 2012, Matt Simerson wrote: On May 18, 2012, at 9:33 AM, Charlie Brady wrote: I think the documentation of the reject option could be clearer. What value of the parameter should be used when first using this plugin? I think reject 0. Boolean means 0 or 1, but your

Re: [PATCH] basicheaders: improved POD and expanded tests

2012-05-18 Thread Charlie Brady
On Fri, 18 May 2012, Matt Simerson wrote: factored date validity tests into their own sub added tests improved POD Excellent. But: s/deffered/deferred/ and ... +# provide backwards comptibility with the old 'days' argument +if ( $self-{_args}{days} ) { +$self-log(LOGWARN,

Re: [PATCH] basicheaders: improved POD and expanded tests

2012-05-18 Thread Charlie Brady
On Fri, 18 May 2012, Charlie Brady wrote: and ... +# provide backwards comptibility with the old 'days' argument +if ( $self-{_args}{days} ) { +$self-log(LOGWARN, deprecated arguments. Update your config.); $self-log(LOGWARN, deprecated argument 'date'. Update

Re: thoughts about a new module called check_spammer_connect

2011-07-29 Thread Charlie Brady
On Thu, 28 Jul 2011, Ask Bjørn Hansen wrote: On Jul 28, 2011, at 11:28, Charlie Brady wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, Could you supply some details, please? Off the top of my head

Re: thoughts about a new module called check_spammer_connect

2011-07-28 Thread Charlie Brady
On Thu, 28 Jul 2011, Ask Bj?rn Hansen wrote: On Jul 27, 2011, at 16:41, Aleksandar Lazic wrote: I use dnscache on my home network and would like to know why anybody decide to move from dnscache. Performance, Could you supply some details, please? IPv6 support, ease of maintenance

Re: AnyEvent mode?

2010-12-07 Thread Charlie Brady
On Tue, 7 Dec 2010, Matt Sergeant wrote: Aleksandar Lazic wrote: On Mon 06.12.2010 16:34, Matt Sergeant wrote: Aleksandar Lazic wrote: Do you have benchmarked it with smtpstone from postfix or some other tools? I just threw it on our spamtrap which does approx 50m

Re: Patch: FATAL PLUGIN ERROR [check_basicheaders]: ...

2010-11-12 Thread Charlie Brady
. That code won't happen, because of the return(DENY, ...). -R Charlie Brady wrote: Do I need to do something more to have this considered for merging? On Mon, 8 Nov 2010, Charlie Brady wrote: check_basicheaders fails if there are no headers at all: http

Re: Patch: FATAL PLUGIN ERROR [check_basicheaders]: ...

2010-11-11 Thread Charlie Brady
Do I need to do something more to have this considered for merging? On Mon, 8 Nov 2010, Charlie Brady wrote: check_basicheaders fails if there are no headers at all: http://bugs.contribs.org/show_bug.cgi?id=6345 --- a/plugins/check_basicheaders +++ b/plugins/check_basicheaders

Patch: FATAL PLUGIN ERROR [check_basicheaders]: ...

2010-11-08 Thread Charlie Brady
check_basicheaders fails if there are no headers at all: http://bugs.contribs.org/show_bug.cgi?id=6345 --- a/plugins/check_basicheaders +++ b/plugins/check_basicheaders @@ -46,10 +46,11 @@ sub hook_data_post { return (DENY, You have to send some data first) if $transaction-data_size ==

Re: Exim alternatives?

2010-09-16 Thread Charlie Brady
On Tue, 14 Sep 2010, Pedro Melo wrote: On Tue, Sep 14, 2010 at 7:17 PM, Ask Bjørn Hansen a...@develooper.com wrote: On Sep 14, 2010, at 7:49, David Favor wrote: My primary challenge with exim is it's difficult to understand configuration system and the random nature of exim suffering

Re: tls plugin and SSL version

2010-07-26 Thread Charlie Brady
, and is not settable in the current code. Matt PS: IIRC, I pulled the high, medium, low settings out of the openssl docs. On Jul 22, 2010, at 7:29 PM, Charlie Brady wrote: I've seen some reports that qpsmtp fails some PCI compliance testing because it can be accessed via SSLv2

Re: [BUG] Default search path used in require_resolvable_fromhost

2010-07-26 Thread Charlie Brady
if you could send patches instead of suggestions. It wasn't my suggestion - I was just relaying it. But point taken. -R Charlie Brady wrote: http://bugs.contribs.org/show_bug.cgi?id=5808 Jesper Knudsen 2010-03-01 01:29:10 MST When using the require_resolvable_fromhost

Re: [PATCH 2/2] increased default TLS security setting

2010-07-26 Thread Charlie Brady
On Sun, 25 Jul 2010, Robert Spier wrote: Applied: 3a7f46aa3e75988686ef9fcae5158fc29f6a86f6 This doesn't seem to be in either of these repos: http://git.develooper.com/qpsmtpd.git http://github.com/abh/qpsmtpd/ Where should I be looking? Thanks. Matt Simerson wrote: switched default

Re: tls plugin and SSL version

2010-07-26 Thread Charlie Brady
? Matt On Jul 22, 2010, at 7:29 PM, Charlie Brady wrote: Here's a simple, and untested, patch - someone might care to do something more elaborate to allow choice of TLSv1 or SSLv3 (unfortunately IO::Socket::SSL doesn't seem to allow disable of just SSLv2

Re: [BUG] Default search path used in require_resolvable_fromhost

2010-07-26 Thread Charlie Brady
On Mon, 26 Jul 2010, Charlie Brady wrote: On Sun, 25 Jul 2010, Robert Spier wrote: I've committed this as ab7c2601f0740fac1c3c117e7e5c0a5690348194. I'm not 100% sure it's a good idea, but I think it's mostly a good thing. What are your reservations? I don't think it would ever

Re: [BUG] Default search path used in require_resolvable_fromhost

2010-07-26 Thread Charlie Brady
it. But point taken. -R Charlie Brady wrote: http://bugs.contribs.org/show_bug.cgi?id=5808 Jesper Knudsen 2010-03-01 01:29:10 MST When using the require_resolvable_fromhost plugin for qpsmtpd I noticed that mails from u...@localhost.localdomain

tls plugin and SSL version

2010-07-22 Thread Charlie Brady
I've seen some reports that qpsmtp fails some PCI compliance testing because it can be accessed via SSLv2. http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard http://bugs.contribs.org/show_bug.cgi?id=6141 Here's a simple, and untested, patch - someone might care to do

[BUG] Default search path used in require_resolvable_fromhost

2010-07-17 Thread Charlie Brady
http://bugs.contribs.org/show_bug.cgi?id=5808 Jesper Knudsen 2010-03-01 01:29:10 MST When using the require_resolvable_fromhost plugin for qpsmtpd I noticed that mails from u...@localhost.localdomain was actually getting through this filter. I finally found out that the plugin has a

rpm packaging bug - smtpd user created with shell not /bin/false

2010-07-17 Thread Charlie Brady
http://bugs.contribs.org/show_bug.cgi?id=6025 if ! id smtpd /dev/null 21 then # need to create smtpd user. if perl -e 'exit ! defined(getgrnam(postdrop))' then # if postfix is installed, we will probably use # queue/postfix, which will need this: supp=-G postdrop

Re: perltidy, bike sheds, and asbestos suits

2010-05-12 Thread Charlie Brady
On Wed, 12 May 2010, Robin Bowes wrote: On 12/05/10 07:00, Ask Bjørn Hansen wrote: On May 11, 2010, at 21:25, Robert Spier wrote: Does anyone else have any opinions on doing a massive perltidy? I'm on the fence. I'm on the fence, too. My concern is mostly for the people with

Re: spool files not temp?

2010-04-14 Thread Charlie Brady
On Wed, 14 Apr 2010, Matt Sergeant wrote: Hi, Can anyone remember the reason that the spool files aren't proper temp files (deleted upon open)? We often end up with a hard restart of qpsmtpd and having these files left around is annoying... I asked that question, and I think there was a

Re: spool files not temp?

2010-04-14 Thread Charlie Brady
On Wed, 14 Apr 2010, Charlie Brady wrote: On Wed, 14 Apr 2010, Matt Sergeant wrote: Hi, Can anyone remember the reason that the spool files aren't proper temp files (deleted upon open)? We often end up with a hard restart of qpsmtpd and having these files left around is annoying

Re: spool files not temp?

2010-04-14 Thread Charlie Brady
My tuppence worth - this potential debugging value doesn't justify risking leaving detritus in the spool directory. Delete the files on open and be done with it. There's no reason they shouldn't be anonymous. On Wed, 14 Apr 2010, Charlie Brady wrote: On Wed, 14 Apr 2010, Charlie Brady wrote

Re: spool files not temp?

2010-04-14 Thread Charlie Brady
On Wed, 14 Apr 2010, Ask Bj?rn Hansen wrote: On Apr 14, 2010, at 17:19, Matt Sergeant wrote: Can anyone remember the reason that the spool files aren't proper temp files (deleted upon open)? We often end up with a hard restart of qpsmtpd and having these files left around is

Re: I am probably doing something wrong

2010-04-05 Thread Charlie Brady
On Mon, 5 Apr 2010, Steve wrote: On Apr 1, 2010, at 2:56, Steve wrote: Hello list, somehow I don't get a new line separating the mail body from the mail headers. How can I enforce a new line between header and body? I am using qpsmtp 0.83 and delivery to maildir. Hallo Bjørn, Can

Re: I am probably doing something wrong

2010-04-05 Thread Charlie Brady
On Mon, 5 Apr 2010, Charlie Brady wrote: Can you give an example of the SMTP transaction (the input to the server) that gives the unexpected result? I did a simple transaction over telnet and port 25: -- HELO localhost MAIL FROM:f...@domain.tld RCPT TO:t...@domain.tld

Re: New plugin: smtptls-forward

2010-03-31 Thread Charlie Brady
On Tue, 30 Mar 2010, Chris Lewis wrote: On 3/30/2010 4:08 PM, Matt Sergeant wrote: Perhaps we need queue/smtp-passthru. It's a fairly complex thing to do in a single plugin in a way sufficiently flexible for a variety of setups. For example, how do you do your RCPT TO lookups? Call

Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION]

2009-11-30 Thread Charlie Brady
On Sun, 29 Nov 2009, Rick wrote: Charlie Brady wrote: [...]or should use a SASL challenge string in the context of AUTH PLAIN. RFC4954 was more clear: The AUTH command initiates a [SASL] authentication exchange between the client and the server. [...] A server challenge is sent as a 334

Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION]

2009-11-30 Thread Charlie Brady
On Sun, 29 Nov 2009, Ask Bj?rn Hansen wrote: On Nov 29, 2009, at 16:25, Rick wrote: Hi Rick! I'm pretty sure Charlie wasn't just being stubborn but rather just trying to figure out what the behavior really should be so we don't change it to work compatibility with alpine just to break it

Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION]

2009-11-30 Thread Charlie Brady
-respond( 334, Please continue ); $prekey= STDIN; } To this: if ( $mechanism eq plain ) { if (!$prekey) { $session-respond( 334, ); $prekey= STDIN; } Signed-off-by: Charlie Brady charl...@budge.apana.org.au bash-3.2$ git diff diff --git a/lib

AUTH PLAIN cancel bug (Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION])

2009-11-30 Thread Charlie Brady
On Sun, 29 Nov 2009, Rick wrote: Also I noticed that Auth.pm does not respond to a client * command during AUTH PLAIN. * is supposed to cancel the AUTH exchange regardless of the mechanism. Here's what I get: AUTH PLAIN 334 * 504 Invalid authentificat * 500 Unrecognized command According

[PATCH] AUTH PLAIN cancel bug (Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION])

2009-11-30 Thread Charlie Brady
aborted Signed-off-by: Charlie Brady charl...@budge.apana.org.au diff --git a/lib/Qpsmtpd/Auth.pm b/lib/Qpsmtpd/Auth.pm index 993c176..b23402d 100644 --- a/lib/Qpsmtpd/Auth.pm +++ b/lib/Qpsmtpd/Auth.pm @@ -20,8 +20,11 @@ sub SASL { if ( $mechanism eq plain ) { if (!$prekey

Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION]

2009-11-29 Thread Charlie Brady
On Sun, 29 Nov 2009, Rick wrote: Trying to get SMTP auth working with alpine, I came across a bug. Alpine sends AUTH PLAIN and waits for a 334 response, then sends the auth string. According to the RFC, the server should reply with 334 and a nothing else, but in Auth.pm qpsmtpd responds

Re: AUTH PLAIN bug with qpsmtpd and alpine [SOLUTION]

2009-11-29 Thread Charlie Brady
On Sun, 29 Nov 2009, Rick wrote: That the initial ready response should be empty is a little more discreetly implied: When the initial-response argument is used with such a mechanism, the *initial empty challenge* is not sent to the client and the server[...] as if it were sent in response

Wrong $! string (tnef2mime plugin)

2009-11-16 Thread Charlie Brady
Does anyone know what's happening here? To my thinking, permission denied != Invalid argument. ... 9566 gettimeofday({1258399355, 828006}, NULL) = 0 9566 open(/tmp/PerlIO_tQARsp, O_RDWR|O_CREAT|O_EXCL|O_LARGEFILE, 0600) = -1 EACCES (Permission denied) 9566 write(2, 9566 FATAL PLUGIN ERROR

Re: Wrong $! string (tnef2mime plugin)

2009-11-16 Thread Charlie Brady
On Mon, 16 Nov 2009, Hinrik �~Vrn Sigurðsson wrote: On Mon, Nov 16, 2009 at 7:54 PM, Charlie Brady charlieb-qpsm...@budge.apana.org.au wrote: 9566  open(/tmp/PerlIO_tQARsp, O_RDWR|O_CREAT|O_EXCL|O_LARGEFILE, 0600) = -1 EACCES (Permission denied) From http://en.wikipedia.org/wiki/dirent.h

Re: Wrong $! string (tnef2mime plugin)

2009-11-16 Thread Charlie Brady
On Mon, 16 Nov 2009, Johan Almqvist wrote: On 16. nov. 2009, at 22.18, Charlie Brady wrote: On Mon, 16 Nov 2009, Hinrik Örn Sigurðsson wrote: On Mon, Nov 16, 2009 at 7:54 PM, Charlie Brady charlieb-qpsm...@budge.apana.org.au wrote: 9566 Â open(/tmp/PerlIO_tQARsp, O_RDWR|O_CREAT|O_EXCL

Re: Move clamav headers at top

2009-11-05 Thread Charlie Brady
On Thu, 5 Nov 2009, Shad L. Lords wrote: Johan Almqvist wrote: On 5. nov. 2009, at 19.55, Shad L. Lords wrote: Ask Bjørn Hansen wrote: On Nov 5, 2009, at 10:31, Shad L. Lords wrote: This might not be the best place to fix this. The correct way would be to fix header-add to

Re: sme server patch to allow relay to badrcptto

2009-11-05 Thread Charlie Brady
On Thu, 5 Nov 2009, Shad L. Lords wrote: Robert Spier wrote: Charlie Brady wrote: On Wed, 4 Nov 2009, Filippo Carletti wrote: In sme server we have some email aliases defined as visible=internal, that is internal users (relayclients) could write to them, but from outside

Re: sme server patch to allow relay to badrcptto

2009-11-04 Thread Charlie Brady
On Wed, 4 Nov 2009, Filippo Carletti wrote: In sme server we have some email aliases defined as visible=internal, that is internal users (relayclients) could write to them, but from outside the lan (non relay clients) the email address is not reachable (non existent). I don't think this is

Re: PATCH: Spelling fixups

2009-10-16 Thread Charlie Brady
On Fri, 16 Oct 2009, Steve Kemp wrote: According to my dictionary Authentification is not a real word. According to mine 'canceled' isn't either. Wanna try again? :-) Patch: -- diff --git a/lib/Qpsmtpd/Auth.pm b/lib/Qpsmtpd/Auth.pm index 635491a..993c176 100644 ---

Re: Peers plugin

2009-09-22 Thread Charlie Brady
On Tue, 22 Sep 2009, Filippo Carletti wrote: The peers plugin by Charlie Brady permits different plugins for connecting clients. Selection of different plugin set is by source IP address of the connection. So the network can be conveniently partitioned into different trust zones

Re: Peers plugin

2009-09-22 Thread Charlie Brady
On Tue, 22 Sep 2009, Filippo Carletti wrote: The peers plugin by Charlie Brady permits different plugins for connecting clients. It's used in thousand of sme server installations since he presented it to the list: It's worth noting that this has only been used with forkserver, and could

Re: Patching require_resolvable_fromhost

2009-07-30 Thread Charlie Brady
On Wed, 29 Jul 2009, Larry Nedry wrote: Hi All, The require_resolvable_fromhost plugin returns DENYSOFT when a host doesn't resolve. This makes sense with a well behaved host. But I've noticed that some hosts that don't resolve will continuously retry and never seem to disconnect.

Re: session-id for qpsmtpd

2009-07-28 Thread Charlie Brady
On Mon, 27 Jul 2009, Chris Lewis wrote: You'd have to push/pull the data to a centralized process. Eg: separate daemon. e.g. memcached. Ick. Mostly ;-) Having a plugin fire a UDP packet to a daemon which collects, analyses them, and stuffs 'em where qpsmtpd can get data back from (eg: a

Re: session-id for qpsmtpd

2009-07-28 Thread Charlie Brady
On Tue, 28 Jul 2009, Aleksandar Lazic wrote: On Die 28.07.2009 09:34, Charlie Brady wrote: On Mon, 27 Jul 2009, Chris Lewis wrote: You'd have to push/pull the data to a centralized process. Eg: separate daemon. e.g. memcached. But, isn't this a cache. It's usually used

Re: how to write a plugin to smtp forwad to multiple servers in RR mode

2009-07-24 Thread Charlie Brady
On Fri, 24 Jul 2009, Junyi-HUANG wrote: I have a requirement that base on the X-PropertyID header info to route the messages to a set of smtp servers in Round Robin mode . For example , if the conf file is like : PID SMTP servers pid_a smtp1:10025, smtp2:10026, smtp3:10027 pid_b -

Re: PATCH [1/5] Disconnect badhelo

2009-06-19 Thread Charlie Brady
On Thu, 18 Jun 2009, Ask Bj?rn Hansen wrote: On Jun 17, 2009, at 8:13, Filippo Carletti wrote: +++ qpsmtpd-0.40/plugins/check_spamhelo 2007-06-14 13:21:45.0 -0600 @@ -23,7 +23,7 @@ for my $bad ($self-qp-config('badhelo')) { if ($host eq lc $bad) { $self-log(LOGDEBUG,

Re: PATCH [2/5] rhsbl_disconnect

2009-06-19 Thread Charlie Brady
This one's mine. On Wed, 17 Jun 2009, Filippo Carletti wrote: See http://bugs.contribs.org/show_bug.cgi?id=3390 for discussion. diff -Nur -x '*.orig' -x '*.rej' qpsmtpd-0.40/plugins/rhsbl mezzanine_patched_qpsmtpd-0.40/plugins/rhsbl --- qpsmtpd-0.40/plugins/rhsbl 2007-06-14

Re: PATCH [3/5] spamassassin noise

2009-06-19 Thread Charlie Brady
On Wed, 17 Jun 2009, Filippo Carletti wrote: http://bugs.contribs.org/show_bug.cgi?id=3340 Also me. Here's the background. Line 195 highlighted: my ($flag, $hits, $required); while (SPAMD) { $self-log(LOGDEBUG, check_spam: spamd: $_); #warn GOT FROM SPAMD1: $_; last unless

Re: PATCH [4/5] clamdscan parameter change

2009-06-19 Thread Charlie Brady
On Wed, 17 Jun 2009, Filippo Carletti wrote: This is needed to use clamav-0.95 which changed an option. http://bugs.contribs.org/show_bug.cgi?id=5108 Jonathan Martens smeserver-contr...@snetram.nl --- qpsmtpd-0.40/plugins/virus/clamav.fixClamscanParameterChange 2009-03-28

Re: PATCH [5/5] clamav denied on fail

2009-06-19 Thread Charlie Brady
On Wed, 17 Jun 2009, Filippo Carletti wrote: http://bugs.contribs.org/show_bug.cgi?id=3098 Shad L. Lords slo...@mail.com --- qpsmtpd-0.40/plugins/virus/clamav 2007-06-14 11:57:23.0 -0600 +++ mezzanine_patched_qpsmtpd-0.40/plugins/virus/clamav 2007-06-14 17:46:23.0 -0600

[PATCH] Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-06-01 Thread Charlie Brady
On Sat, 23 May 2009, Charlie Brady wrote: On Fri, 22 May 2009, Charlie Brady wrote: On Fri, 22 May 2009, J wrote: However, I'm back to seeing the connection processes being left behind, despite an explicit quit from the remote host. ... It looks to me as though qpsmtpd should have

Re: prefork 'orphaned child' messages

2009-05-30 Thread Charlie Brady
On Fri, 29 May 2009, Diego d'Ambra wrote: Jared Johnson wrote: What's orphaned is not a child process, but a shared mem hash record for a process which no longer exists. I suspect that code is racy. Hrm, then if we're getting a whole lot of these, does this mean child processes are

Re: prefork 'orphaned child' messages

2009-05-29 Thread Charlie Brady
On Thu, 28 May 2009, Jared Johnson wrote: We're experiencing some strange issues and have been looking at qpsmtpd-prefork's output with $debug set. We're getting a whole lot of lines like this: orphaned child, pid: 1285 removed from memory at /usr/bin/qpsmtpd-prefork line 598. ... Any

Re: qpsmtpd-async authenticated relaying direction request

2009-05-28 Thread Charlie Brady
On Thu, 28 May 2009, Matt Sergeant wrote: years. So my qpsmtpd runs a no_bounces plugin, which I believe I've posted here before. Google seems not to have heard of it.

Re: Feature request to disable CONTROL_PORT

2009-05-27 Thread Charlie Brady
On Wed, 27 May 2009, David Favor wrote: Having qpsmtpd listen on an additional control port creates serious complexity when running multiple copies of qpsmtpd, as each copy has to somehow figure out which control port to use, hope it's free and then connect. Please clarify what you mean: $

Re: newer check_spamhelo

2009-05-25 Thread Charlie Brady
On Sun, 24 May 2009, Peter Walter wrote: Charlie Brady wrote: On Mon, 11 May 2009, Hanno Hecker wrote: What about something like the attached? I'll have a closer look, but looks an excellent suggestion. Thanks Hanno. Charlie, I assume Hanno asked you for code review? Did you get

Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-05-25 Thread Charlie Brady
On Sun, 24 May 2009, J wrote: On Sat, 23 May 2009, J wrote: Looks like I may have been mistaken. I connected twice from the same system, and I think what actually happened is that the one process was reused. Because when I make one connection each from different systems, two processes were

Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-05-25 Thread Charlie Brady
On Mon, 25 May 2009, J wrote: On Mon, 25 May 2009, Charlie Brady wrote: ./qpsmtpd-prefork [192.168.1.50 : testlaptop : 23:12:05 2009-05-23] ... I think there might be an issue here however, which is that the modified @ARGV is not set back to pre-connection state when the peer disconnects

Timeouts (Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?))

2009-05-25 Thread Charlie Brady
On Mon, 25 May 2009, J wrote: On Mon, 25 May 2009, Charlie Brady wrote: ./qpsmtpd-prefork [192.168.1.50 : testlaptop : 23:12:05 2009-05-23] I think there might be an issue here however, which is that the modified @ARGV is not set back to pre-connection state when the peer disconnects

Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-05-23 Thread Charlie Brady
On Fri, 22 May 2009, Charlie Brady wrote: On Fri, 22 May 2009, J wrote: However, I'm back to seeing the connection processes being left behind, despite an explicit quit from the remote host. I suspect this is due to not using a queueing plugin, at this point. I also see that 'svc -d

Re: [qpsmtpd] Downing the service (Re: 0.81 Can prefork listen on more than one port?)

2009-05-23 Thread Charlie Brady
On Fri, 22 May 2009, J wrote: My current 'run' file (posted in previous message(s)): = #!/bin/sh exec 21 \ No, that's not what you have. You've deleted the trailing backslash, right? sh -c ' exec \ /usr/local/bin/softlimit -m 10

Re: Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-05-23 Thread Charlie Brady
On Sat, 23 May 2009, J wrote: A manual connection where I connect, helo, then quit - stays in the process table. If you strace that process, you'll see that it goes back to select() waiting for a new connection on the socket. You should expect each child process to be reused up to 100

Downing the service (Re: [qpsmtpd] 0.81 Can prefork listen on more than one port?)

2009-05-22 Thread Charlie Brady
On Fri, 22 May 2009, J wrote: However, I'm back to seeing the connection processes being left behind, despite an explicit quit from the remote host. I suspect this is due to not using a queueing plugin, at this point. I also see that 'svc -d' leaves all the qpsmtpd-prefork processes in the

Re: [qpsmtpd] Still looking: tcpserver startup for qpsmtpd-prefork 0.81

2009-05-21 Thread Charlie Brady
On Thu, 21 May 2009, Matt Sergeant wrote: On Thu, 21 May 2009, Devin Carraway wrote: On Wed, May 20, 2009 at 09:40:21PM -0400, Charlie Brady wrote: I think the -T *should* be there on the command line, but there are some bugs in qpsmtpd and/or your plugins which need to be fixed before

Re: [qpsmtpd] Still looking: tcpserver startup for qpsmtpd-prefork 0.81

2009-05-20 Thread Charlie Brady
On Tue, 19 May 2009, J wrote: I reinstalled clean, from scratch. I changed my 'run' file to the following: #!/bin/sh exec 21 \ sh -c ' exec \ /usr/local/bin/softlimit -m 1 \ ${PERL-perl} -T ./qpsmtpd-prefork \ --port 25 \ --port 587

Re: [qpsmtpd] Still looking: tcpserver startup for qpsmtpd-prefork 0.81

2009-05-20 Thread Charlie Brady
On Wed, 20 May 2009, J wrote: On Wed, 20 May 2009, Charlie Brady wrote: So try: #!/bin/sh exec 21 \ exec \ /usr/local/bin/softlimit -m 1 \ ... ./run: line 2: exec: exec: not found Sorry, I cut and pasted without checking each line. You are asking shell to run

Re: [qpsmtpd] Still looking: tcpserver startup for qpsmtpd-prefork 0.81

2009-05-20 Thread Charlie Brady
On Thu, 21 May 2009, Matt Sergeant wrote: On Wed, 20 May 2009, J wrote: When I remove that (and installed a missing Math::BigInt package from CPAN), everything loads, but complains about an insecure dependency on line 416 in setpriority (in qpsmtpd-prefork). (And the prefork processes

Re: newer check_spamhelo

2009-05-11 Thread Charlie Brady
On Mon, 11 May 2009, Hanno Hecker wrote: What about something like the attached? I'll have a closer look, but looks an excellent suggestion. Thanks Hanno. --- Charlie

Re: newer check_spamhelo

2009-05-10 Thread Charlie Brady
On Sun, 10 May 2009, Robert Spier wrote: Ask Bjørn Hansen wrote: On May 9, 2009, at 19:21, Charlie Brady wrote: This is really a namespace issue, I think. Should check_spamhelo belong to an old simple ineffective plugin, or a newer, and presumably more useful, one? As much as it sucks

Re: newer check_spamhelo

2009-05-09 Thread Charlie Brady
On Sat, 9 May 2009, Robert Spier wrote: Reading through that thread, it looks like the right code to use is http://www.nntp.perl.org/group/perl.qpsmtpd/2004/07/msg1674.html Because this is a large change, and the old version is so simple, I think I'd rather add this as a new plugin,

Re: strange problem with qpsmtpd-0.40

2009-04-23 Thread Charlie Brady
On Thu, 23 Apr 2009, J?rg C. Meyer wrote: we have the following situation. A mail from a scpecial sender is processed and it seems it is forwarded by smtp-forward to the next hop (a queueing qmail process on the same host). But it never arrives there, qmail-send log is empty and the mail is

Re: strange problem with qpsmtpd-0.40

2009-04-23 Thread Charlie Brady
On Thu, 23 Apr 2009, Charlie Brady wrote: On Thu, 23 Apr 2009, J?rg C. Meyer wrote: we have the following situation. A mail from a scpecial sender is processed and it seems it is forwarded by smtp-forward to the next hop (a queueing qmail process on the same host). But it never arrives

Re: tls plugins, server response time out

2009-02-10 Thread Charlie Brady
On Tue, 10 Feb 2009, ahmad riza h nst wrote: then i tried to telnet to port 465: Trying xxx.xxx.xxx.xxx... Connected to xxx.xxx.xxx.xxx Escape character is '^]'. the log continue: 9202 running plugin (pre-connection): hosts_allow 9202 trying to get config for hosts_allow 9202 Plugin

  1   2   3   4   >