Re: Worth implementing qmail-remote?

2003-03-28 Thread Charlie Brady
On Thu, 27 Mar 2003, Charlie Brady wrote: On Wed, 26 Mar 2003, Matt Sergeant wrote: We've got a document at work that very clearly describes qmail-remote, along with some of our extensions. Is it worth implementing that part of qmail in perl - is there any part of qmail-remote

DNS code size (Re: Memory footprint)

2003-10-18 Thread Charlie Brady
On Mon, 15 Sep 2003, Matt Sergeant wrote: On 15 Sep 2003, at 12:01, Ask Bjørn Hansen wrote: ... use Net::DNS consumed: 1764 KB bytes Ouch. I think it's only used by some of the plugins, but it's really far too convenient. I wonder if there's room for some XS code here for doing

Re: PATCH: rejected by require_resolvable_fromhost

2003-11-26 Thread Charlie Brady
On Wed, 26 Nov 2003, Keith C. Ivey wrote: Unfortunately, Mail::Address-new('', '')-format is just an empty string rather than ''. But that makes sense, since no other address gets angle brackets added when the phrase part is empty. It looks like qpsmtpd should be using Mail::Address

Re: spamassassin 2.61?

2004-01-08 Thread Charlie Brady
On Sat, 3 Jan 2004, John Peacock wrote: Both #'s 2 and 3 can also take advantage of the Mail::SpamAssassin 2.60+ feature of using Unix Domain Sockets to communicate with spamd, which should also be a distinct performance gain (as well as being much better security-wise). spamd can also

CPAN module packages Re: SMTP.pm errors

2004-01-08 Thread Charlie Brady
On Mon, 22 Dec 2003, Skaag Argonius wrote: I recommend installing them with cpan, unless you are on Debian, and then you migh wanna try apt-get to keep the modules up to date whenever you dist-upgrade your system. And I'd recommend anyone using an RPM packaged distribution should use RPMs,

Re: PPerl usage

2004-03-10 Thread Charlie Brady
On Wed, 10 Mar 2004, Matt Sergeant wrote: Interesting. I've recently discovered one weird thing in pperl where pperl tries too hard to become like the calling process, to the point of trying to set $$ to the caller's PID. If you comment out the code where it sets $$ everything starts

Re: PPerl usage

2004-03-10 Thread Charlie Brady
On Wed, 10 Mar 2004, Robert Spier wrote: I'm curious as to whether anyone has built a forking server around qpsmtpd (essentially doing what tcpserver does, but in perl)? I'm aware of the select server version(*), but would prefer a forking server (say, using Net::Daemon). That would seem

Re: PPerl usage

2004-03-10 Thread Charlie Brady
On Wed, 10 Mar 2004, Robert Spier wrote: It doesn't fork on every connection. The forking on every connection is part of what causes some of the overhead. Do you have evidence that that is the case? Fork should be inexpensive, and it's certainly not a problem with tcpserver.

tcpserver + perl (Re: PPerl usage)

2004-03-12 Thread Charlie Brady
On Wed, 10 Mar 2004, Charlie Brady wrote: http://cr.yp.to/ucspi-tcp/tcpserver.html The traditional qpsmtpd run script teams tcpserver and perl OK. Here's another possible solution: http://www.superscript.com/ucspi-tcphandle/tcpperl.html It seems to be more or less tcpserver

Re: Fork server

2004-03-18 Thread Charlie Brady
On Mon, 15 Mar 2004, David Nicol wrote: Matt Sergeant wrote: I've checked a fork server ... number of child limits. Matt. Here's a way to do number of child limiting: Another is to use the facilities of Net::Daemon. I'm curious to know whether Matt looked at Net::Daemon before

Re: Fork server

2004-03-19 Thread Charlie Brady
On Thu, 18 Mar 2004, Robert Spier wrote: However please send patches if you find things missing. It's performing extremely well for me. And for me too. I'm testing it (in production). It's definitely performing faster and lighter than pperl. All sounds good. Now if only I could

Re: Fork server

2004-03-19 Thread Charlie Brady
On Fri, 19 Mar 2004, Matt Sergeant wrote: On 19 Mar 2004, at 18:35, Charlie Brady wrote: If $ENV{RELEAYCLIENT} is set - which it never is AFAICT. No, check the plugin code again. You can specify relay clients via either a text or cdb config file in the qpsmtpd/config directory now. I

Net::Daemon version (Re: Fork server)

2004-03-20 Thread Charlie Brady
On Thu, 18 Mar 2004, Charlie Brady wrote: Here's a way to do number of child limiting: Another is to use the facilities of Net::Daemon. Here's a quick hack at using Net::Daemon. No access control, or tuning of number of children yet. Has had a miniscule amount of testing. #! /usr/bin

Re: Fork server benchmarks

2004-03-21 Thread Charlie Brady
On Sat, 20 Mar 2004, James H. Thompson wrote: I ran a few small tests on an old slow system and only looked at messages/second. Based on my very limited testing SpeedyCGI is slightly faster than forkserver See how much difference this patch makes: diff -u -r1.2 qpsmtpd-forkserver ---

Re: denysoft_greylist problem

2004-03-22 Thread Charlie Brady
On Mon, 22 Mar 2004, Sam Laffere wrote: It also seems that there are a few legitimate mail servers out there that do not queue and retry on the DENYSOFT. That sounds like a definition of legitimate which I'm not familiar with :-) A couple of instances of customers having immediate denials

Re: denysoft_greylist problem

2004-03-22 Thread Charlie Brady
On Mon, 22 Mar 2004, Matt Sergeant wrote: It probably has to be re-written with locking (though I haven't read the code for the plugin - does it lock?) Yes, it does lock. I didn't check that it will always remove the lock. Behaviour probably depends on which form of the command is run -

Re: check_hostbyrename (discussion)

2004-03-23 Thread Charlie Brady
On Tue, 23 Mar 2004, Sam Laffere wrote: Make no mistake, this plugin is a heavy hand. By its self, this plug-in seemed to eliminate the largest chunk of remaining spam when I added it in. It also reduced the load on the server by saving the following plugins the effort of more tests.

Re: denysoft_greylist problem

2004-03-23 Thread Charlie Brady
On Tue, 23 Mar 2004, Sam Laffere wrote: Charlie Brady wrote: Yes, [greylisting] does lock. I didn't check that it will always remove the lock. Behaviour probably depends on which form of the command is run - Sam, are you using select server, or running under tcpserver? Tcpserver. I

Re: IP Address of qpsmtpd

2004-03-23 Thread Charlie Brady
On Tue, 23 Mar 2004, Skaag Argonius wrote: My mail server has several ip addresses. I want qpsmtpd to bind to a specific one. How do I do this? That depends on which form of qpsmtpd you run (i.e. how you start qpsmtpd). I changed the file /config/IP and it still other hosts see another ip

Re: IP Address of qpsmtpd

2004-03-23 Thread Charlie Brady
On Tue, 23 Mar 2004, Skaag Argonius wrote: I guess it would probably be qmail-remote. How do I change this? Why do you want to change it? There's a good chance you'll break something if you try. --- Charlie

Re: General denial question (tarpitting)

2004-03-25 Thread Charlie Brady
On 25 Mar 2004, James Craig Burley wrote: Basically true, but that's only one aspect of tarpitting. Since the spammer has to keep open an available port, that's one less port he can use from any given IP address (using vanilla port management) to blast out his spam. No. That's one less

Re: General denial question (tarpitting)

2004-03-25 Thread Charlie Brady
On 25 Mar 2004, James Craig Burley wrote: I think that depends how amply overprovisioned they are with bandwidth. I expect have more in their arsenal than you do. You hit the nail on the head there...*except* I think *we* have more in our arsenal than *they* do. More bandwidth? N

Re: General denial question (tarpitting)

2004-03-25 Thread Charlie Brady
CC to [EMAIL PROTECTED], the iptables discussion list. [Dropped. crossposting to multiple mailing lists is bad form.] On Thu, 25 Mar 2004, David Nicol wrote: Use iptables (for instance) to selectively/randomly drop packets. That's brilliant! does iptables have a TARPIT target that

iptables and tarpitting (was Re: General denial question (tarpitting))

2004-03-25 Thread Charlie Brady
On Thu, 25 Mar 2004, David Nicol wrote: That's brilliant! does iptables have a TARPIT target that causes the peer to retransmit as much as possible? There appears to be an interesting perl module here: http://www.spamcannibal.org/docs/IPTables-IPv4-DBTarpit-Tools.html --- Charlie

Re: iptables and tarpitting (was Re: General denial question (tarpitting))

2004-03-25 Thread Charlie Brady
On Thu, 25 Mar 2004, Charlie Brady wrote: There appears to be an interesting perl module here: http://www.spamcannibal.org/docs/IPTables-IPv4-DBTarpit-Tools.html And the spamcannibal site itself looks interesting. Welcome to the SpamCannibal SpamCannibal blocks spam at the origination

SpamCannibal and qpsmtpd (was Re: iptables and tarpitting)

2004-03-25 Thread Charlie Brady
On Thu, 25 Mar 2004, Charlie Brady wrote: SpamCannibal uses a continually updated database containing the IP addresses of spam or DoS servers and blocks their ability to connect using a TCP/IP tarpit, I've had a quick read of the documentation. I believe that SpamCannibal can co-exist

Re: General denial question (tarpitting)

2004-03-26 Thread Charlie Brady
On Fri, 26 Mar 2004, Anthony D. Urso wrote: This is one condition where the SelectServer really shines, as I have it providing trans-connection notes() just for this purpose (write me if you'd like a copy of the patch). Please post the patch to a web site, or (if small enough) to the list,

Unrestricted SMTP (Re: General denial question (tarpitting))

2004-03-26 Thread Charlie Brady
On Fri, 26 Mar 2004, Tim Meadowcroft wrote: Really ? Before my broadband I used 5 different free (UK) dialup accounts on a round-robin basis and never used any of their SMTP servers but always sent stuff via my hosted domain... now I wouldn't claim that my 5 providers extrapolate to most,

Re: To change logging via 'run' file...

2004-03-28 Thread Charlie Brady
[An old reply I found lurking in my Drafts folder. May as well send it.] On Tue, 27 Jan 2004, Andrew Pam wrote: On Sat, Jan 24, 2004 at 09:06:34PM +, [EMAIL PROTECTED] wrote: Frankly, for the few extra bytes I would lose on each line, I would much prefer having the logging timestamp in

Re: Broken Vaccuum plugin (was Re: General denial question (tarpitting))

2004-03-30 Thread Charlie Brady
On Tue, 30 Mar 2004, Gavin Carr wrote: Or just pass off to spam cannibal instead if you don't want to go the smtp tarpit route. AIUI, spam cannibal is an smtp tarpit. --- Charlie

Have you looked at mailfront? Re: qpsmtpd replacing patched qmail-smtpd?

2004-06-09 Thread Charlie Brady
On Tue, 8 Jun 2004, Jens Benecke wrote: My main worry is downtime and lost mail due to configuration imcompatbilities. Speaking about that, what about SMTP AUTH? I absolutely need SMTP AUTH with authentication via vpopmail/vchkpw. My qmail/control looks like this currently: No

Re: starttls support

2004-07-05 Thread Charlie Brady
On Sat, 3 Jul 2004, Robert Spier wrote: Looking into it a bit further - stunnel is the way to go. That way we don't have to fiddle with qpsmtpd at all - it just comes for free. But then you don't get STARTTLS unless you do some funky magic. You just get SSL on another port. (Or am I

Re: $MAXCONNIP for qp-forkserver (was: Re: NOOP handler)

2004-07-06 Thread Charlie Brady
On Mon, 5 Jul 2004, Tim Wesemann wrote: http://linux.voyager.hr/ucspi-tcp/tcpserver-limits-2004-03-27.diff This diff adds a MAXCONNIP to qpsmtpd-forkserver. I set the default to my $MAXCONNIP = 5; The problem with this patch is that it simply drops connections after the MAXLOAD,

$ENV{RELAYCLIENT} (was Re: Problem with check_goodrcptto)

2004-09-02 Thread Charlie Brady
On Thu, 2 Sep 2004, Matt Sergeant wrote: No, we have to move AWAY from $ENV{RELAYCLIENT} because it does NOT work in single threaded environments. This is why the check_relay plugin sets $transaction-relaying, which is what everyone should be checking instead of $ENV{RELAYCLIENT}. The

Taint checking config (Re: New plugin: auth_ldap_bind)

2005-04-11 Thread Charlie Brady
On Mon, 11 Apr 2005, John Peacock wrote: and return an untainted value directly. It would lead to much more compact and yet still readable code like this: $ldhost = $self-qp-config('ldap_host', qr/^(([a-z0-9]+\.?)+)$/) localhost; $ldport = $self-qp-config('ldap_port', qr/^(\d+)$/) 389; or if

Re: parse for dotted quad

2005-04-15 Thread Charlie Brady
On Fri, 15 Apr 2005, Bob wrote: Robert Spier wrote: What are you trying to do? ... As John pointed out, Data::Validate::IP has is_ivp4 and other methods which test a string for whether it is, not contains, but is an ip, also known as a dotted quad, of the form n.n.n.n, where n is between 0 and 255

Re: parse for dotted quad

2005-04-15 Thread Charlie Brady
On Fri, 15 Apr 2005, John Peacock wrote: I have no idea what you are talking about here; ... I'm finding that's frequently the case when Bob writes. I haven't worked out whether it's because he's talking in riddles or just using some shorthand which I can't follow.

Re: Segmentation faults with qpsmtpd-forkserver?

2005-05-03 Thread Charlie Brady
On Tue, 3 May 2005, Justin Erenkrantz wrote: I'm currently trying to go through the process to merge our local changes with 0.29; but I'm hoping that some folks here may have some pointers or ideas of what might be going wrong (esp. if it might be already fixed in 0.29 or trunk). A segfault

Re: Problem while trying to implement TLS

2005-05-11 Thread Charlie Brady
On Wed, 11 May 2005, Michael Holzt wrote: I'm currently trying to hack TLS support for qpsmtpd. The idea is to use IO::Socket::TLS. I implemented a new starttls command, my current code is: ... Is your full patch available anywhere? I'd like to have a look. --- Charlie

Re: Anyone going to YAPC::NA?

2005-06-18 Thread Charlie Brady
On Fri, 17 Jun 2005, Fred Moyer wrote: Matt Sergeant wrote: On 17 Jun 2005, at 08:40, Keith Ivey wrote: I'm going to YAPC in Toronto. Anybody else? Yup. We could do a qpsmtpd BOF if there's enough interest. ... $interest++; $interest++;

Re: Great news from YAPC

2005-07-06 Thread Charlie Brady
On Fri, 1 Jul 2005, Gordon Rowell wrote: John Peacock wrote: Matt Sergeant wrote: A birdy tells me that qpsmtpd will be the default smtp server in the next release of the e-smith SME server. That birdy is correct, or you could have asked me instead :-) And why is first hand news from

Re: PATCH: let forkserver listen on multiple interfaces

2005-07-06 Thread Charlie Brady
On Tue, 5 Jul 2005, Devin Carraway wrote: Forkserver can accept a --listen-address switch to listen on a particular address/interface instead of 0.0.0.0, but only one. This expands the handling of that switch so as to listen on any number of local addresses, using IO::Select to manage them.

Re: PATCH: let forkserver listen on multiple interfaces

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, Matt Sergeant wrote: On 6 Jul 2005, at 15:40, Charlie Brady wrote: That's an added complication, and more code - which usually means that more things can go wrong. In what circumstances would someone want more than one interface, but not all interfaces? You want

RFC: Use Class::Frame (was Re: Great news from YAPC)

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, Charlie Brady wrote: In other good news from YAPC, I got most of STARTTLS support working, with forkserver 0.29. I should be able to post usable patches late this week - ... One thing I need to do is add some additional state information in the Qpsmtpd::Connection

Re: PATCH: let forkserver listen on multiple interfaces

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, frank wrote: On Wed, 6 Jul 2005, Charlie Brady wrote: On Wed, 6 Jul 2005, Matt Sergeant wrote: On 6 Jul 2005, at 15:40, Charlie Brady wrote: That's an added complication, and more code - which usually means that more things can go wrong. In what circumstances would

Re: RFC: Use Class::Frame (was Re: Great news from YAPC)

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, Matt Sergeant wrote: On 6 Jul 2005, at 16:51, Charlie Brady wrote: Thoughts? I'd rather just eval those subs into existence than need another CPAN module to do something so easy. OK Something like: BEGIN { my @fields = qw( remote_host remote_ip remote_info

Re: RFC: Use Class::Frame (was Re: Great news from YAPC)

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, Matt Sergeant wrote: On 6 Jul 2005, at 16:51, Charlie Brady wrote: Thoughts? I'd rather just eval those subs into existence than need another CPAN module to do something so easy. Something like: BEGIN { my @fields = qw( remote_host remote_ip remote_info remote_port

Re: RFC: Use Class::Frame (was Re: Great news from YAPC)

2005-07-06 Thread Charlie Brady
On Wed, 6 Jul 2005, Matt Sergeant wrote: On 6 Jul 2005, at 20:23, Charlie Brady wrote: Actual subs may need to be slightly different, so that I can clear atributes from the connection object. Can't you do that with $conn-hello(undef); ? No

[Patch] STARTTLS support (forkserver only)

2005-07-07 Thread Charlie Brady
Michael Holtz was close with his attempt, but the key line he missed was: *STDIN = *STDOUT = $socket; This allows us to use tied file handles for the SSL communication, rather than writing directly to file descriptors which are connected to the socket. Something I know which is missing

Re: [Patch] STARTTLS support (forkserver only)

2005-07-07 Thread Charlie Brady
And again, as an attachment, in case patch has been mangled by the MUA. --- Charlie diff -ru ../qpsmtpd-0.29.orig/lib/Qpsmtpd/Connection.pm ./lib/Qpsmtpd/Connection.pm --- ../qpsmtpd-0.29.orig/lib/Qpsmtpd/Connection.pm Wed Sep 22 12:01:16 2004 +++ ./lib/Qpsmtpd/Connection.pm Thu Jul 7

Re: [Patch] STARTTLS support (forkserver only)

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: Can you try the attached plugin, along with *just* your change to reset the connection. Will do. I *think* that's the only thing we need to change to get this to work as a plugin rather than changing the core (again). And I'd much rather we could

Re: [Patch] STARTTLS support (forkserver only)

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, John Peacock wrote: One thing to point out is that there can be at most a single TLS provider possible, whereas there can be multiple AUTH providers. Are you thinking that there would be an auth plugin that other plugins could plugin to? Seems reasonable. Though I

Re: [Patch] STARTTLS support (forkserver only)

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: On 8 Jul 2005, at 11:42, Charlie Brady wrote: On Fri, 8 Jul 2005, Matt Sergeant wrote: Can you try the attached plugin, along with *just* your change to reset the connection. Will do. Note there are some bugs in the plugin I sent you. I'll work

Re: [Patch] STARTTLS support (forkserver only)

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: On 8 Jul 2005, at 11:42, Charlie Brady wrote: Nice approach indeed. Looks good, but I can see at least one problem (not insurmountable) - STARTTLS should be removed from capabilities after TLS is negotiated. Isn't that done by reset_transaction

Re: [Patch] STARTTLS support (forkserver only)

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: Can you try the attached plugin, along with *just* your change to reset the connection. I *think* that's the only thing we need to change to get this to work as a plugin rather than changing the core (again). Only thing that you need to change,

Testing STARTTLS (Re: [Patch] STARTTLS support (forkserver only))

2005-07-08 Thread Charlie Brady
For those interested in dabbling with STARTTLS, it's very useful to have a convenient scriptable testing tool. I've been using swaks (http://jetmore.org/john/code/#swaks) which has been extremely useful. Thanks John! The current version however has a bug which you'll need to fix if you want

Re: [perl #36486] Bug Test

2005-07-08 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: On 8 Jul 2005, at 22:20, Keith Ivey wrote: The date line was missing but my mail server added one, so I didn't notice. Maybe that's something qpsmtpd should do too :-) Why? qpsmtpd is an MTA (a partial one). Providing a Date header is not mail

Re: [Patch] STARTTLS support (forkserver only)

2005-07-09 Thread Charlie Brady
On Fri, 8 Jul 2005, Matt Sergeant wrote: Can you try the attached plugin, along with *just* your change to reset the connection. I *think* that's the only thing we need to change to get this to work as a plugin rather than changing the core (again). And I'd much rather we could do this via

Enhancement required for STARTTLS

2005-07-09 Thread Charlie Brady
If qpsmtpd has negotiated TLS on a connection, we may wish to record the negotiated encryption parameters in a Received: header, either the one which is already added, or in a second one. --- Charlie

Re: About smtpgreeting

2005-07-14 Thread Charlie Brady
On Thu, 14 Jul 2005, Guillaume Filion wrote: I'm wondering if one of the smtpgreeting patches is going to be included in svn. I don't really mind which one is used (1) but I would find that feature useful. Not just useful, but necessary for compliance with documentation. Are there any

Re: MX pointing to localhost

2005-07-29 Thread Charlie Brady
On Thu, 28 Jul 2005, John Peacock wrote: Hanno Hecker wrote: Ok, here it is... now the plugin accepts ip/mask pairs in the form require_resolvable_fromhost 192.168.0.0/16 10.0.0.0/8 which are treated as invalid MX IPs, in addition to the default ones defined in %invalid. I hate to do this

Re: Peter's RPMS (Re: 0.31 release candidate 2)

2005-08-23 Thread Charlie Brady
On Tue, 23 Aug 2005, Charlie Brady wrote: Is it impractical to build your RPMs so that they are version agnostic? Speaking of agnosticism, I notice that the cf_wrapper, client_stats, majordomo, rcpt_accept and rhsbl_rcpt plugin rpms are all arch i386, when they could reasonable by noarch

Re: Peter's RPMS (Re: 0.31 release candidate 2)

2005-08-23 Thread Charlie Brady
On Tue, 23 Aug 2005, Peter J. Holzer wrote: On 2005-08-23 14:16:08 -0400, Charlie Brady wrote: and I'd be happier to use canonical versions than home built ones. I'm trying to keep the patches to the minimum, and I'm still hoping that 3 of the patches will make it into 0.31-final. Ah, I

Re: strange

2005-09-02 Thread Charlie Brady
On Thu, 1 Sep 2005, John Peacock wrote: Pascal Dreissen wrote: @4000430f887620ab0f5c 2470 FATAL PLUGIN ERROR: Insecure dependency in exec while running with -T switch at ./plugins/queue/qmail-queue line 106, STDIN line 11. Nobody ? You haven't given us much to go on. What version

Re: 0.31rc2 : Mails smaller than 10k are not scanned

2005-09-22 Thread Charlie Brady
On Thu, 22 Sep 2005, John Peacock wrote: Gordon Rowell wrote: If messages are smaller than 10k, the scanners don't get to see them: You aren't the first to note this, unfortunately. It appears that the memory_threshold override is not working correctly (which is really the appropriate

[Bug 0.31] Various virus scanning plugins are making messages executable

2005-10-05 Thread Charlie Brady
This is unnecessary, and possibly unwise: ... my $mode = (stat($self-{_spool_dir}))[2]; if ( $mode 07077 ) { # must be sharing spool directory with external app $self-log(LOGWARN, Changing permissions on file to permit scanner access); chmod $mode, $filename; } ...

Re: bounce_verp todo tinydns_whack_attack

2005-10-21 Thread Charlie Brady
On Wed, 19 Oct 2005, Bob Dodds wrote: PROBLEM: domain nesting works for tinydns wildcarding, but it does not work for listservers. But it's a fish and you're hungry, right? Work up your bounce_verp.skip file. We Persecute Minorities, What's Best For The Most, on a Zero Sum basis. Most of us

Re: A competitor

2005-10-28 Thread Charlie Brady
On Tue, 25 Oct 2005, [ISO-8859-1] Ask Bj?rn Hansen wrote: On Oct 25, 2005, at 14:55 , Matt Sergeant wrote: http://svn.apache.org/repos/asf/httpd/mod_smtpd/trunk/ It's actually turned out fairly interesting looking. We transcribe a C smtpd to perl, add some apache httpd tasting bits and

Re: tmp dir and logs

2006-01-31 Thread Charlie Brady
On Tue, 31 Jan 2006, John Peacock wrote: The tricky part is how to handle an error condition when we would want to keep a copy of the file. What conditions might they be? I want to get a much better handle on why we aren't cleaning up right now (though it may just be a byproduct of using

Re: tmp dir and logs

2006-01-31 Thread Charlie Brady
On Tue, 31 Jan 2006, John Peacock wrote: I'm struggling to think of any case where qpsmtpd needs to preserve content. The content is always available elsewhere - either in the backend, which has acknowledged receiving it, or in the sender's system, which will keep it for resending until it

Re: tmp dir and logs

2006-01-31 Thread Charlie Brady
On Tue, 31 Jan 2006, John Peacock wrote: My next SWAG is that the undeleted files are exclusively from the cases where the remote MTA ended the connection prematurely (or timed-out). This would seem to bear out the contents of the files I find, which frequently include only headers, or maybe

Re: [perl #38397] qpsmtpd-forkserver doesn't like PERL_UNICODE

2006-02-02 Thread Charlie Brady
On Wed, 1 Feb 2006, Peter J.Holzer wrote: I accidentally restarted qpsmtpd-forkserver while having the following locale-related environment variables set: LC_COLLATE=POSIX LANG=en_US.UTF-8 PERL_UNICODE=SDAL ... A real fix would probably be to explicitely call binmode :raw on all

per peer configuration?

2006-02-05 Thread Charlie Brady
I wish to have different configurations for different connecting clients. And I'd like to have finer grained control than just whether they are permitted to relay or not. I've roughed out a plugin for doing that, and I'd appreciate some feedback. I've called my plugin peers. It takes a

Re: qppoprelay - TLS documentation

2006-02-05 Thread Charlie Brady
On Sat, 4 Feb 2006, John Peacock wrote: [EMAIL PROTECTED] wrote: I hope all the mail clients work transparently with these plugins - documentation is sparse at best! If they aren't plugin and play, then I'm not familiar with either AUTH or TLS... tls is 95% plug-and-play as of

Re: Moving on - auth_flat_file plugin

2006-02-05 Thread Charlie Brady
On Mon, 6 Feb 2006 [EMAIL PROTECTED] wrote: (Apologies for being such a pest. My first and only previous install, 0.26, was a piece of cake compared to this.) I bet that tls and smtp auth didn't work on that install either!

Should spamhelo DENY_DISCONNECT?

2006-02-05 Thread Charlie Brady
I don't want to waste my time talking to a spambot claiming to be aol.com. And there a big chance that he will ignore my 550 code, and will send me the message anyway. --- qpsmtpd-0.31.1/plugins/check_spamhelo 2005-11-18 04:45:34.0 -0500 +++

Re: per peer configuration?

2006-02-06 Thread Charlie Brady
On Mon, 6 Feb 2006, [ISO-8859-1] Ask Bj?rn Hansen wrote: On Feb 5, 2006, at 10:55 AM, Charlie Brady wrote: I wish to have different configurations for different connecting clients. And I'd like to have finer grained control than just whether they are permitted to relay or not. I've roughed

Re: Should spamhelo DENY_DISCONNECT?

2006-02-08 Thread Charlie Brady
On Wed, 8 Feb 2006, John Peacock wrote: Charlie Brady wrote: I don't want to waste my time talking to a spambot claiming to be aol.com. And there a big chance that he will ignore my 550 code, and will send me the message anyway. Except that qpsmtpd won't continue to play with that server

OK, DENYSOFT_DISCONNECT then (Re: Should spamhelo DENY_DISCONNECT?)

2006-02-08 Thread Charlie Brady
On Wed, 8 Feb 2006, John Peacock wrote: frank wrote: Here's my take: Ever met an MTA/MUA that _changed_ it's HELO name mid-stride when you refused the first one? I didn't think so. My copy uses DENY_DISCONNECT :) You made the choice to be non-RFC compliant; I don't think that is

Re: Should spamhelo DENY_DISCONNECT?

2006-02-08 Thread Charlie Brady
On Wed, 8 Feb 2006, Robert Spier wrote: I think what we need is a three-strikes meta plugin: if a remote MTA has been sent a DENY_SOFT or DENY and continues to attempt the send a One of the things on my eternally long list is a throttling system. If you connect too often, too fast, go away!

Re: OK, DENYSOFT_DISCONNECT then (Re: Should spamhelo DENY_DISCONNECT?)

2006-02-08 Thread Charlie Brady
On Wed, 8 Feb 2006, John Peacock wrote: You miss the point. Lotus Notes would think there was a network problem and immediately start another delivery attempt (i.e. not wait for the retry interval). Would you care to estimate the number of Internet connected unrepaired Lotus Notes systems

Re: smtp-forward plugin

2006-02-10 Thread Charlie Brady
On Thu, 12 Jan 2006, Matt Sergeant wrote: On 12 Jan 2006, at 07:49, Allan Joergensen wrote: shouldn't the smtp-forward plugin issue the same errorcode to the connection server as it gets from the backend smtp server? ie. if the backend server says 550 address: Recipient address rejected:

Re: smtp-forward plugin

2006-02-10 Thread Charlie Brady
On Fri, 10 Feb 2006, Charlie Brady wrote: A patch for this would be welcome - the smtp-forward plugin was rather hurriedly put together (by yours truly). Allan's replacement plugin is online here, and is awaiting comments and/or incorporation: http://nowhere.dk/~alj/qpsmtpd/smtp-forward

Re: smtp-forward plugin

2006-02-10 Thread Charlie Brady
On Fri, 10 Feb 2006, Allan Joergensen wrote: On 10-Feb-2006, Charlie Brady wrote: The string End data with has no special meaning in RFC 2821. Are we trying to work around a bug in Net::SMTP? Or a particular backend? It's Postfix thing: [SMTP session] data 354 End data with CRLF.CRLF

Re: smtp-forward plugin

2006-02-10 Thread Charlie Brady
On Fri, 10 Feb 2006, Allan Joergensen wrote: On 10-Feb-2006, Charlie Brady wrote: Sorry, which final message from the server? And what version of Net::SMTP? The final reply from the smtp-server (where the message is accepted or rejected). My server has libnet-perl 1.19 (Ubuntu). Ah, OK

Re: [announce] 0.32rc1

2006-02-17 Thread Charlie Brady
On Fri, 17 Feb 2006, [ISO-8859-1] Ask Bj?rn Hansen wrote: Unless something comes up ... ... Changes: [snip] Are you going to replace the smtp-forward queue plugin? I don't think it's really usable as is, because it doesn't relay response codes. See

Re: Mail submisstion - second instance of qpsmtpd vs stunnel (was: stunnel and qpsmtpd - SOLVED)

2006-02-17 Thread Charlie Brady
On Fri, 17 Feb 2006, Les Mikesell wrote: Yes, but MimeDefang does all the same stuff that you can do in qpsmtpd - or if it doesn't it would be easy to duplicate there, and it works with sendmail. You've been playing the same tune for a long time now, Les:

Re: MIMEDefang with qmael)

2006-02-19 Thread Charlie Brady
On Sat, 18 Feb 2006, Les Mikesell wrote: it has changed. However, I think it would be a worthwhile project because qpsmtpd can work as the receiving front-end for either qmail or postfix and would thus let the excellent features of mimedefang work just about everywhere. Since this is your

Re: MIMEDefang with qmail?

2006-02-19 Thread Charlie Brady
Hi David, On Sat, 18 Feb 2006 [EMAIL PROTECTED] wrote: Bob Dodds wrote: http://svn.perl.org/qpsmtpd/trunk/plugins/milter Has anyone *actually* used MIMEDefang with qmail in any way? As the author of MIMEDefang, I'd be fascinated to hear that someone has it working. However, I have my

Re: 0.32 Outlook and TLS

2006-02-27 Thread Charlie Brady
On Mon, 27 Feb 2006 [EMAIL PROTECTED] wrote: I have ports 587 and 465 NATed to port 25 ... That might be OK for port 587, but not for 465. SMTP is a plain text protocol, until TLS is negotiated by STARTTLS. Port 465 is SMTP over TLS, and launches straight into SSL/TLS before

Re: 0.32 Outlook and TLS

2006-02-28 Thread Charlie Brady
On Tue, 28 Feb 2006, John Peacock wrote: Devin Carraway wrote: It's a pretty short adjustment to forkserver; we already can listen on multiple addresses, allowing a port number to be included is easy enough. Hmmm, I never looked at the forkserver code. I'll take a look at implementing

Re: 0.32 Outlook and TLS

2006-02-28 Thread Charlie Brady
On Tue, 28 Feb 2006, Charlie Brady wrote: On Tue, 28 Feb 2006, John Peacock wrote: Devin Carraway wrote: It's a pretty short adjustment to forkserver; we already can listen on multiple addresses, allowing a port number to be included is easy enough. Hmmm, I never looked at the forkserver

Re: invalid RCPT TOs from relay clients / MAIL FROMs

2006-03-04 Thread Charlie Brady
On Sat, 4 Mar 2006, Hanno Hecker wrote: - should Qpsmtpd::Address accept mails with a trailing .? Like $ host -t MX perl.org. perl.org mail is handled by 5 mx.develooper.com. Why shouldn't it? That's a valid DNS name, as you've shown.

Re: Split plugins dir

2006-03-08 Thread Charlie Brady
On Wed, 8 Mar 2006, Matt Sergeant wrote: In thinking about upgrading a qpsmtpd installation I once again ran across the issue that I can't just copy the plugins dir over my old one, as I have plugins that I have modified, and my own plugins. We got around this with config by creating

Re: [perl #38747] RCPT TO addresses with spaces are not correctly parsed

2006-03-17 Thread Charlie Brady
On Thu, 16 Mar 2006, Robert Spier wrote: Suggestion is not to accept addresses without in mail() and rcpt(). We shouldn't do that unless some other major mailer is doing it. Otherwise it will bite us. Addresses without are not valid SMTP. I think that mailfront requires . I've never

Re: [perl #38747] RCPT TO addresses with spaces are not correctly parsed

2006-03-17 Thread Charlie Brady
On Fri, 17 Mar 2006, Charlie Brady wrote: I think that mailfront requires . It doesn't.

Re: [perl #38741] [PATCH] Handle multi-line responses from plugins (Re: smtp-forward plugin) (fwd)

2006-03-20 Thread Charlie Brady
On Mon, 20 Mar 2006, John Peacock via RT wrote: Committed. Can you think of a simple way to test this functionality? - Write a plugin which returns string1\nstring2. Check what is sent back to the client. - Write a plugin which returns (string1, string2). Check what is sent back to the

Re: [perl #38741] [PATCH] Handle multi-line responses from plugins(Re: smtp-forward plugin) (fwd)

2006-03-20 Thread Charlie Brady
On Mon, 20 Mar 2006, John Peacock via RT wrote: Charlie Brady wrote: On Mon, 20 Mar 2006, John Peacock via RT wrote: Committed. Can you think of a simple way to test this functionality? - Write a plugin which returns string1\nstring2. Check what is sent back to the client. - Write

Re: Greylisting specific IP ranges

2006-03-28 Thread Charlie Brady
On Tue, 28 Mar 2006, Bryan Scott wrote: Since my mail servers' users mainly deal with other North American users, I'd like to implement greylisting for specific /8's so I get some of the benefits of greylisting without the appearance of affecting users' normal email. Has anybody already

Re: Greylisting specific IP ranges

2006-03-29 Thread Charlie Brady
On Tue, 28 Mar 2006, [ISO-8859-1] Ask Bj?rn Hansen wrote: A wrapper plugin using the is_a inheritance thing should be able to check if the IP is in the /8 (or in a DNSBL) and if so then run the greylisting plugin. Is there some doco on the is_a inheritance thing? Neither the wiki nor grep

  1   2   3   4   >