badmailfrom or ignoring mail with from

or by googling. I wonder if some legitimate mailers might not be setting the MAIL FROM properly even though the message has a From header. Does anyone have experience with this issue? Thank you, - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla

Re: greylising ideas

need the sender IP address? Or do you want qpsmtpd works by IP address--not by domain names. The sender may be forged so it can't be trusted. Reverse DNS lookups are also unreliable. This is making implementation trickier but I think I can manage. - -- JT Moree -BEGIN PGP SIGNATURE

rejecting invalid recipients on server that is NOT primary mailserver WAS badmailfrom or ignoring mail with from

are not available a plugin can be used to query the real mail server. Is there one available already that does this? It would vary based on the mail server . . . - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

Re: rejecting invalid recipients on server that is NOT primary mailserver

asking but we are not yet using ldap. It could be used as a model for another one I guess . . . thank you - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

nfslocking with greylist

. Probably should change version if applying the patch? - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFtQWoFI6sVJUR1B8RAlCpAJ9n5dqR3Lc4ESQx5nxWymToMThI2gCdHuww UFM6eOvbYZIbTmAT4xla+SE= =HNc8 -END PGP

Re: greylising ideas

not 100% sure that I have weeded those out. In fact I didn't weed anything out but did some tests and couldn't get some of them to show up. I believe that I have a good list but would like to do more tests before going live. - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU

greenlisting WAS greylising ideas

to collect and make usuable a dynamic list of 'good' email address (at least I need to - to make this work). Perhaps I should create a new plugin with a new flag of greenlist or even a new whitelist plugin based on this. Right now my implementation will only affect the greylisting plugin. - -- JT Moree

Re: greenlisting WAS greylising ideas

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 JT Moree wrote: I am doing a fair amount of work to collect and make usuable a dynamic list of 'good' email address (at least I need to - to make this work). Perhaps I should create a new plugin with a new flag of greenlist or even a new

writing plugins (whitelist with database)

going to be rebuilt every time the plugin is run if I make it in register? if so, is there a way to cache the connection by making it somewhere else? thank you, - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http

new plugin: db_whitelist_soft WAS writing plugins (whitelist with database)

and it's in the tarball. It will support file based backends as well as sql but the file support is not finished. - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

Re: new plugin: db_whitelist_soft

more things I'll add the plugin to the wiki. - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFyebNFI6sVJUR1B8RAjFsAJ0aj0XWiueVColIFebLzPJ0wnnuPACfd2wS zxkprG1aYcDC6Ug6ewn0pA8= =GdmA -END PGP

Re: Replace greylisting whitelist with SPF

? Why not just turn on sender-permitted-from? That plugin will allow those emails and they greylisting should ingore them. Right? - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF4vIiFI6sVJUR1B8RAv

Re: Replace greylisting whitelist with SPF

at the spf object you could modify the spf plugin to create notes and modify greylisting to look for notes. Or is too much information needed to put it in notes? - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http

plugins page links are broken

HTTP Response Status 403 Forbidden Is this a permanent problem? Anyone in contact with the perl.org people? -- JT Moree

archive plugin

://wiki.qpsmtpd.org/plugins:queue:http-forward looks promising. Anyone have other ideas? Thank you, P.S. Google for qpsmtpd and archive gives lots of hits for the mailing list archives. -- JT Moree

qpsmtpd as Primary MTA

on this topic? I'm sure there have been some. or provide insight? Thank you, -- JT Moree

Re: qpsmtpd as Primary MTA

is out of the question) - must handle two cases for local and remote mail + one less MTA to configure - must configure all normal MTA-MDA stuff in qp instead -- JT Moree

Re: qpsmtpd as Primary MTA

? are there plugins to handle it? -- JT Moree

Re: blocking smtp connections based on age of domain?

to someone else? - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGaBiJFI6sVJUR1B8RAgETAJ41zUTf8doMFrWAGjrUx3uY3fio4gCgj4A3 KgidtAcfpNZBsFQ3XFTOB5s= =q7Kl -END PGP SIGNATURE-

OT SMTP forwards broken by SPF WAS blocking smtp connections based on age of domain?

an t-bird extension that looks at mail coming from a particular location/account and automatically strips the forwarded message out. - -- JT Moree -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

Re: OT SMTP forwards broken by SPF

. I know. I'm living in lala land. But that's what it takes to make improvements. We have to be tired of the status quo enough to want to change. -- JT Moree

OT SMTP broken WAS SMTP forwards broken by SPF

if it means you end up with QMTP in the end by a different name it gives people the impression that there is less barrier to adoption. Still thinking outside the box ;) Thank you for entertaining my off topic posts this long. -- JT Moree

smtp greeting is different inside vs outside network

. Can someone point me to a configuration option that might cause this behaviour? perhaps because internal mail is allowed to relay? but then where is the configuration for setting the hostname for non-rcpthosts? Thank you, -- JT Moree

Re: smtp greeting is different inside vs outside network

know why there are two different behaviours. I just noticed the version is 026 (2.6?). I may try to play with a newer version of qpsmtpd later this week. -- JT Moree

run script and different ports

for better error handling IP=`head -1 config/IP` fi exec $SOFTLIMIT -m 2500 \ $TCPSERVER -c 10 -v -R -p \ -u $QMAILDUID -g $NOFILESGID $IP $PORT \ ./qpsmtpd 21 -- JT Moree

Re: run script and different ports

are using but I'm wondering if the default scripts could be improved. Perhaps a script called run_fork in addition to the run script? I am also looking at the Sys V init scripts from the wiki. -- JT Moree

Re: run script and different ports

-connections 40 \ $PORTS -- JT Moree

0.40 and whitelist_soft problem

misunderstanding what whitelist does? I haven't found anything when googling for these key terms and searching the archives. The pod for whitelist_soft doesn't say anything about how it does the whitelisting or having to deal with other modules such as rcpt_to. Thank you -- JT Moree

Re: 0.40 and whitelist_soft problem

users are whitelisted by sender. Yes I know it's not a good way to do it, but I inherited it and am working as fast as I can to improve the systems. -- JT Moree

Re: 0.40 and whitelist_soft problem

? Is it the use of OKALL instead of OK? -- JT Moree

Re: 0.40 and whitelist_soft problem

to add something like: return OK if $self-transaction-notes('whitelistsender'); =cut -- JT Moree

Re: 0.40 and whitelist_soft problem

JT Moree wrote: to your rcpt_to plugin. Thank you, I appreciate that but one more clarification. It's not MY rcpt_to plugin. It came with the stock qpsmtpd .40 tarball that I downloaded. I'm sorry. It's rcpt_ok. NOT rctp_to -- JT Moree

Re: 0.40 and whitelist_soft problem

Gavin Carr wrote: On Thu, Aug 16, 2007 at 01:02:52PM -0700, JT Moree wrote: Shouldn't the documentation for the whitelist_soft module mention that it requires modifying the rest of the plugins? Yes, probably. My current dev version does say: snip That's good to hear. I humbly request

Re: 0.40 and whitelist_soft problem

at each stage? Will that allow the process to work as I want. Right now whitelist_soft is returning OK at mail and DECLINED at rcpt. Thank you, -- JT Moree

Re: 0.40 and whitelist_soft problem

location than where whitelist_soft sets. RHSBL hook_mail - check all four. return DECLINED if any found hook_rcpt - check all four. return DECLINED if any found -- JT Moree

Re: 0.40 and whitelist_soft problem

JT Moree wrote: So, I want spamassassin, dnsbl, and maybe rhsbl to skip processing if they see the whitelist flags. The whitelist_soft plugin uses or in the case of using the regex_mailfrom plugin I'd have them do return DECLINED if $self-connection-notes('regex_mailfrom'); -- JT Moree

helper scripts

I wrote some small helper scripts for parsing logs. Would they be useful enough to include in qpsmtpd? -- JT Moree #!/bin/sh usage() { cat FOO $0 - utility to parse qpsmtpd log messages for a given string and get the whole transaction Usage: $0 logfile [grep options] text_to_find

Re: helper scripts

(also preforking). Is there a message ID that is unique to each message? -- JT Moree

Re: Transaction IDs

to) the PID. +$self-{_transaction_id} = sprintf(%08X, rand(2**32 - 1)); Is this uique enough? what is the chance of getting the same random number again? should it be a combination of the PID + time + rand? -- JT Moree

Re: Transaction ID suggestions

JT Moree wrote: Is this uique enough? what is the chance of getting the same random number again? should it be a combination of the PID + time + rand? my @sname = split(/\./, $self-qp-config(me)); = $sname[0].$$.'r'.int( (( time ^ $$ ) * rand($$)) / rand(time/$$)); = sprintf(%08X, rand(2

Re: Transaction ID suggestions

something rather than nothing. -- JT Moree

Re: Transaction ID suggestions

, but this should be impossible if the networks are connected. As in two clients behind a NAT sending to our server at the exact same time? Might be possible from server farms or distributed mailing list systems? What do you guys think? -- JT Moree

Re: Transaction ID suggestions

Matt Sergeant wrote: I've checked in $transaction-id support now. Please let me know if you think it's OK. which method did you use? -- JT Moree

Re: Transaction ID suggestions

Matt Sergeant wrote: On 28-Aug-07, at 3:12 PM, JT Moree wrote: Matt Sergeant wrote: I've checked in $transaction-id support now. Please let me know if you think it's OK. which method did you use? hires_time.pid.local_port I found the svn web interface: # generate id my $conn

Re: Transaction ID suggestions

-local_ip(); my $rip = $conn-remote_ip(); my $rport = $conn-remote_port || 0; my $lport = $conn-local_port || 0; my $start = time; my $id = $$_$start_$lip:$lport_$rip:$rport; -- JT Moree

Re: Transaction ID suggestions

and rely on it working the same way. -- JT Moree

Re: Transaction ID suggestions

Guy Hulbert wrote: me = linux1 - linux1__ me = linux2.example.com - linux2.e If you run two instances you can call them 'thing1' and 'thing2'. I'd rather not. -- JT Moree

Re: Transaction ID suggestions

-9//cd; Is this being used anymore? I don't find a reference to $SALT_HOST in the same file. -- JT Moree

Re: Whitelisting

plugins could use. -- JT Moree

new release WAS authnull plugin in config.sample/plugins enables relaying?

. +1 +1 this gets the transaction/message id fixes out too? -- JT Moree

spamd whitelist problem

. spamassassin is rejecting mail. -- JT Moree Systems Admin www.kahalacorp.com 9311 E. Via de Ventura Scottsdale, AZ 85258 480.362.4800 - main 480.362.4405 - direct

Re: spamd whitelist problem

JT Moree wrote: What is the generally accepted method to have spamassassin NOT scan a message? i.e. return DECLINED I was looking for a way to configure the plugin in qpsmtpd but it probably makes more sense to put it in the spamassassin settings in /root/.spamassassin/user_prefs