qmail Digest 17 Apr 2000 10:00:01 -0000 Issue 974
Topics (messages 40147 through 40169):
Re: help on User who send SPAM
40147 by: chuck
40148 by: Troy Frericks
40149 by: chuck
40150 by: Irwan Hadi
40153 by: Irwan Hadi
Conf-spawn max only 509 ?
40151 by: Irwan Hadi
40152 by: Peter van Dijk
softhome.net qmail smtp server error
40154 by: Giulio Orsero
40155 by: Joergen Persson
40158 by: Andy Bradford
40159 by: rogers-qmail.h0050da615e79.ne.mediaone.net
40160 by: Peter van Dijk
40167 by: Giulio Orsero
Need someone to contract for qmail/ezmlm -> db integration
40156 by: Brian Ghidinelli
qmail anti spam
40157 by: Justin Simoni
Re: Sender domain must resolve error for some sites...
40161 by: Anthony White
40166 by: Anthony White
40168 by: Anthony White
New install errors... Can you provide Clue?
40162 by: Jeff Dilcher
mail not sending
40163 by: kevin.anthem.oceania.net
40164 by: Ismal Hisham Darus
40165 by: kevin.anthem.oceania.net
Start Qmail
40169 by: Mike Alexander Sauvain
Administrivia:
To unsubscribe from the digest, e-mail:
[EMAIL PROTECTED]
To subscribe to the digest, e-mail:
[EMAIL PROTECTED]
To bug my human owner, e-mail:
[EMAIL PROTECTED]
To post to the list, e-mail:
[EMAIL PROTECTED]
----------------------------------------------------------------------
Giovanni,
It depends whether or not the "spam" is actually coming from(or through)
your server. If someone is actually relaying through your server, you can
stop this through your /var/qmail/control/rcpthosts file(make sure the file
exists, and contains only the domains you receive mail for.) and your
/etc/tcp.smtp file(see man. pages) assuming you're running ucspi-tcp. For
further filtering, you may check out rbl-smtpd.
On the other hand, if the mail is not coming through your server and the
headers have been forged(often the case), there's nothing you can really do.
Someone is merely using your domain to cover their actions.
Regards,
Charles Werbick
The Wirehouse
I received a lot of bounce messages from man sites about a user who
doesn't exits on my site. I suppose someone use an address with my domain
to send mass-mailing and spam. There is a way to prevent this kind of
problem? or the only way is to filter the incoming messages (bounce from
other site)?
thanks anyone can help me.
Giovanni:)
At 05:43 AM 4/16/00 , chuck wrote:
[snip]
> On the other hand, if the mail is not coming through your server and the
>headers have been forged(often the case), there's nothing you can really do.
>Someone is merely using your domain to cover their actions.
[snip]
About a year ago, I had somebody forge headers that referred to my site and
they went and spamed AOL. I was getting bounce messages as fast as AOL's
14 mail servers could send them. I had to make 14 entries into
'badmailfrom' to make them quit it.
#@imo28.mx.aol.com
#@relay27.mx.aol.com
#@relay28.mx.aol.com
#@relay31.mx.aol.com
#@rly-ya01.mx.aol.com
#@rly-za01.mx.aol.com
#@rly-za02.mx.aol.com
#@rly-za03.mx.aol.com
#@rly-za04.mx.aol.com
#@rly-za05.mx.aol.com
#@rly-zb05.mx.aol.com
#@rly-zc04.mx.aol.com
#@rly-zd01.mx.aol.com
#@rly-zd03.mx.aol.com
Now a question. Is there a syntax that specifies ALL OF AOL, for example
*.aol.com
or .aol.com
I vaguely remember trying both and neither worked.
#
Uh, what about legitimate messages from those servers? aol is a pretty big
one to block completely...(even if it is just bounces) Assuming the return
address on the offending spam isn't valid one might try bouncing all mail
addressed to non-valid users.
then again I guess it's just a matter of how many bounces you're receiving
;-)
Regards,
Charles Werbick
The Wirehouse
-----Original Message-----
From: Troy Frericks [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 16, 2000 06:10
To: [EMAIL PROTECTED]
Subject: RE: help on User who send SPAM
At 05:43 AM 4/16/00 , chuck wrote:
[snip]
> On the other hand, if the mail is not coming through your server and the
>headers have been forged(often the case), there's nothing you can really
do.
>Someone is merely using your domain to cover their actions.
[snip]
About a year ago, I had somebody forge headers that referred to my site and
they went and spamed AOL. I was getting bounce messages as fast as AOL's
14 mail servers could send them. I had to make 14 entries into
'badmailfrom' to make them quit it.
#@imo28.mx.aol.com
#@relay27.mx.aol.com
#@relay28.mx.aol.com
#@relay31.mx.aol.com
#@rly-ya01.mx.aol.com
#@rly-za01.mx.aol.com
#@rly-za02.mx.aol.com
#@rly-za03.mx.aol.com
#@rly-za04.mx.aol.com
#@rly-za05.mx.aol.com
#@rly-zb05.mx.aol.com
#@rly-zc04.mx.aol.com
#@rly-zd01.mx.aol.com
#@rly-zd03.mx.aol.com
Now a question. Is there a syntax that specifies ALL OF AOL, for example
*.aol.com
or .aol.com
I vaguely remember trying both and neither worked.
#
At 07:10 16/04/2000 -0500, Troy Frericks wrote:
>At 05:43 AM 4/16/00 , chuck wrote:
>Now a question. Is there a syntax that specifies ALL OF AOL, for example
>*.aol.com
>or .aol.com
I believe you need this then
ftp://ftp.mira.net/unix/mail/qmail/wildmat-0.2.patch
But, sorry, I;ve tried to patch to my qmail-1.03 but it won't patched.
If someone could help me, please ;)
I've tried to patch <wildmat-0.2.patch , but the patch program says that it
can't patch my Makefile, and some other programs. This is really weired,
since I can patch my qmail with these patches : with the syntax above.
http://www.qmail.org/big-todo.103.patch
http://www.jedi.claranet.fr/qmail-bounce.patch
http://homepages.munich.netsurf.de/Franz.Sirl/qmail-pop3d-1.03.diff
ftp://ftp.id.wustl.edu/pub/patches/qmail-verh-0.02.tar.gz
http://www.qmail.org/qmail-popbull-1.03.patch
ftp://ftp.nlc.net.au/pub/unix/mail/qmail/qmail-date-localtime.patch
http://www.qmail.org/qmail-1.03-quotas-1.1.patch
http://www.netmeridian.com/e-huss/queue-fix.tar.gz
and big-concurrencypatch ;)
>I vaguely remember trying both and neither worked.
>#
>
-------
AFLHI 058009990407128029/089802---(102598//991024)
At 08:58 16/04/2000 -0700, Irwan Hadi wrote:
>At 07:10 16/04/2000 -0500, Troy Frericks wrote:
>>At 05:43 AM 4/16/00 , chuck wrote:
>>Now a question. Is there a syntax that specifies ALL OF AOL, for example
>>*.aol.com
>>or .aol.com
Hi you ban @iname.com too right ?
<[EMAIL PROTECTED]>:
209.180.46.180 does not like recipient.
Remote host said: 553 sorry, your envelope sender is in my badmailfrom list
(#5.7.1)
Giving up on 209.180.46.180.
-------
AFLHI 058009990407128029/089802---(102598//991024)
I use Linux Mandrake, and Kernel 2.2.14. I've change the value of NRTask at
/usr/linux/include/linux/tasks.h from 512 to 2048, recompile the kernel,
and reboot the system.
But when I've patched the qmail-1.03 with big-concurrencypatch, the
conf-spawn max is only 509, and can't be at least 1000 or qmail would not
compile at all.
How to make qmail can ever reach 1000 concurrency remote setting ?
-------
AFLHI 058009990407128029/089802---(102598//991024)
On Sun, Apr 16, 2000 at 09:01:04AM -0700, Irwan Hadi wrote:
> I use Linux Mandrake, and Kernel 2.2.14. I've change the value of NRTask at
> /usr/linux/include/linux/tasks.h from 512 to 2048, recompile the kernel,
> and reboot the system.
>
> But when I've patched the qmail-1.03 with big-concurrencypatch, the
> conf-spawn max is only 509, and can't be at least 1000 or qmail would not
> compile at all.
>
> How to make qmail can ever reach 1000 concurrency remote setting ?
On FreeBSD, I could accomplish this with a -DFDSETSIZE=16384 in the right
place. Don't know about Linux.
Greetz, Peter.
--
Peter van Dijk - student/sysadmin/ircoper/madly in love/pretending coder
|
| 'C makes it easy to shoot yourself in the foot;
| C++ makes it harder, but when you do it blows your whole leg off.'
| Bjarne Stroustrup, Inventor of C++
Can you explain me the following error?
Trying 204.144.231.55...
Connected to mx0a.softhome.net.
Escape character is '^]'.
220 softhome.net ESMTP
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
250 ok
data
554 RCPT first (#5.5.1)
I think they have misconfigured their system, right? Or the command I
used are wrong?
Thanks.
--
[EMAIL PROTECTED]
Giulioo,
Qmail list
Giulioo's server seems to be case sensitive, take a look at the following
example:
gyllenborst% telnet 204.144.231.55 25
Trying 204.144.231.55...
Connected to 204.144.231.55.
Escape character is '^]'.
220 softhome.net ESMTP
HELO tlth.lth.se
250 softhome.net
MAIL FROM: <[EMAIL PROTECTED]>
250 ok
RCPT TO: <[EMAIL PROTECTED]>
250 ok
DATA
354 go ahead
.
250 ok 955906520 qp 7726
RSET
250 flushed
QUIT
221 softhome.net
Connection closed by foreign host.
I didn't attach my first attempt since it failed. Then I tried uppercase
and that did the trick.
Chapter 2 in RFC821 says:
>Commands and replies are not case sensitive. That is, a command or
>reply word may be upper case, lower case, or any mixture of upper and
>lower case.
Your server seems to violate it... BTW - you can find the rfc at:
http://www.ietf.org/rfc/rfc0821.txt
At 07:11 PM 4/16/00 +0200, you wrote:
>Can you explain me the following error?
>
>Trying 204.144.231.55...
>Connected to mx0a.softhome.net.
>Escape character is '^]'.
>220 softhome.net ESMTP
>mail from: [EMAIL PROTECTED]
>250 ok
>rcpt to: [EMAIL PROTECTED]
>250 ok
>data
>554 RCPT first (#5.5.1)
>
>I think they have misconfigured their system, right? Or the command I
>used are wrong?
>
>Thanks.
>
>--
>[EMAIL PROTECTED]
>
>
--
Joergen Persson
Sysadmin TLTH
Thus said Joergen Persson on Sun, 16 Apr 2000 19:41:59 +0200:
> Giulioo's server seems to be case sensitive, take a look at the following
> example:
I don't believe it is case sensitive at all... I did the same and I get
the error message as well.
[bradipo@sicilia bradipo]$ telnet 204.144.231.55 25
Trying 204.144.231.55...
Connected to 204.144.231.55.
Escape character is '^]'.
220 softhome.net ESMTP
HELO sicilia
250 softhome.net
MAIL FROM: [EMAIL PROTECTED]
250 ok
RCPT TO: [EMAIL PROTECTED]
250 ok
DATA
554 RCPT first (#5.5.1)
Andy
--
+====== Andy ====== TiK: garbaglio ======+
| Linux is about freedom of choice |
+== http://www.xmission.com/~bradipo/ ===+
PGP signature
From: Andy Bradford <[EMAIL PROTECTED]>
Date: Sun, 16 Apr 2000 14:59:36 -0600
Thus said Joergen Persson on Sun, 16 Apr 2000 19:41:59 +0200:
> Giulioo's server seems to be case sensitive, take a look at the following
> example:
I don't believe it is case sensitive at all... I did the same and I get
the error message as well.
I notice that the working case has angle brackets, and the two broken
ones don't.
-- Bob Rogers
On Sun, Apr 16, 2000 at 06:06:57PM -0400, [EMAIL PROTECTED]
wrote:
> From: Andy Bradford <[EMAIL PROTECTED]>
> Date: Sun, 16 Apr 2000 14:59:36 -0600
>
> Thus said Joergen Persson on Sun, 16 Apr 2000 19:41:59 +0200:
>
> > Giulioo's server seems to be case sensitive, take a look at the following
> > example:
>
> I don't believe it is case sensitive at all... I did the same and I get
> the error message as well.
>
> I notice that the working case has angle brackets, and the two broken
> ones don't.
a.k.a. qmail-1.02 IIRC.
Greetz, Peter.
--
Peter van Dijk - student/sysadmin/ircoper/madly in love/pretending coder
|
| 'C makes it easy to shoot yourself in the foot;
| C++ makes it harder, but when you do it blows your whole leg off.'
| Bjarne Stroustrup, Inventor of C++
On Mon, 17 Apr 2000 00:12:30 +0200, hai scritto:
>> I notice that the working case has angle brackets, and the two broken
>> ones don't.
>
>a.k.a. qmail-1.02 IIRC.
Note: softhome.net is not my server, is where I have some free email
accounts.
Could
554 RCPT first (#5.5.1)
mean something else, like unknown user, access denied, .....?
$ telnet mx0a.softhome.net 25
Trying 204.144.231.54...
Connected to mx0a.softhome.net.
Escape character is '^]'.
220 softhome.net ESMTP
MAIL FROM: <[EMAIL PROTECTED]>
250 ok
RCPT TO: <[EMAIL PROTECTED]>
250 ok
DATA
554 RCPT first (#5.5.1)
The smtp server thing started some days ago, together with the pop3
thing:
fetchmail: 5.1.0 querying pop.softhome.net (protocol POP3) at Mon, 17
Apr 2000 0
8:39:41 +0200 (CEST)
fetchmail: POP3< +OK <[EMAIL PROTECTED]>
fetchmail: POP3> USER *
fetchmail: POP3< +OK
fetchmail: POP3> PASS *
fetchmail: POP3< -ERR unknown username: chkpoppass
fetchmail: unknown username: chkpoppass
fetchmail: Authorization failure on [EMAIL PROTECTED]
The user supplied is definitely NOT "chkpoppass"
--
[EMAIL PROTECTED]
We have a client who runs a number of mailing lists. Data and
subscription information is kept on our Sybase database server.
We have another machine (mail server) running qmail + ezmlm + vpopmail.
The setup works great.
We need a module that we can put into the list-subscribe and
list-unsubscribe stream and have it perform a SQL call or two on our
existing database tables. Right now we have one direction
synchronization.. the website/database server adds/removes people from the
ezmlm subscriber list. We want to close the loop and have the ezmlm
process also update the database tables/website. This may or may not mean
just converting our ezmlm setup to run strictly from the DB but we're
looking for some recommendations.
If anyone has some experience with this and would like some work, please
drop me a line off-list.
Brian
everyone on this list would be interested
in reading an anti spam article my sys admin wrote
recently:
http://www.summersault.com/chris/techno/qmail/qmail-antispam.html
have fun,
-justin simoni
!skazat! => http://skazat.com
I'll try being nicer if you'll try being smarter.
-Bank of America Tech support
http://skazat.com/quotes
Thanks to all who have replied to my "Sender domain must resolve"
problem.
I am not an expert on DNS and our DNS records are held by
a company that has been sold twice over the last 6 months
with resulting staff changes.
Me "barking up the wrong tree" and them going through lots of
changes makes it hard.
Anyway I am now going to try to get things resolved
according to advice given from you guys.
I will post a message when things are fixed so you know
what came out of it.
Anthony
Hi there,
As promised, the explanation to my domain issues.
The ISP holding our domain name records has
set the DNS up as non-authoritative by mistake.
No one can tel me how that happened but we
believe that it happened in conjunction with
a migration of DNS to an other server (Machine).
Now a lookup on our domain name will return
the IP address '203.44.8.249' which is our
www server.
This seems to be a common setup. I assume
that a domain name lookup from sendmail or
qmail will be OK since there will be a reply
rather than 'SERVFAIL' as before.
I will confirm if things work once the DNS
entries have propagated through the Net.
Anthony
Hi there,
Here comes the final installment on my problems with
sending mail to certain domains.
The problem, as mentioned, was that our domain name
records were set up as non-authoritative. I don't
know how our ISP managed that, but they have changed
the records so that the DNS records are authoritative.
Sending mail to the domains mentioned earlier now works.
Thanks to all here for their patience.
Best regards
Anthony
PS. Qmail is a great program, I don't think I will go back to
sendmail again.
According to the README.var-qmail:
---------------
4) Get the package qmail-1.03-102memphis.src.rpm from this directory.
This package does not contain the qmail sources; it contains a
tarball of the compiled qmail binaries and a spec file.
Execute
rpm --rebuild qmail-1.03-102memphis.src.rpm
--------------
So I do it, and here is what I get:
[root@cueva /root]# rpm --rebuild qmail-1.03-102memphis.src.rpm
Installing qmail-1.03-102memphis.src.rpm
Bad owner/group: /usr/src/redhat/SOURCES/var-qmail-1.03.tar.gz
Here is ls -la of
/usr/src/redhat/SOURCES/
[root@cueva /root]# ls -la /usr/src/redhat/SOURCES/
total 300
drwxr-xr-x 2 root 0 4096 Apr 16 19:38 .
drwxr-xr-x 7 root 0 4096 Feb 27 03:13 ..
-rw-r--r-- 1 root 0 293692 Aug 16 1999 var-qmail-1.03.tar.gz
This is a RedHat 6.1 machine
Can anyone get me past this hurdle?
Help!
Thanks!!
Jeff Dilcher
My mail does not send mail outside of the localhost.
Mail for [EMAIL PROTECTED] gets droped into anthem.oceania.net
below is the log
Kevin
955981781.832465 end msg 182828
955981827.832963 starting delivery 68: msg 182831 to local [EMAIL PROTECTED]
955981827.833012 status: local 1/10 remote 0/20
955981827.915095 delivery 68: success: did_1+0+0/
955981827.915128 status: local 0/10 remote 0/20
955981827.915156 end msg 182831
955981834.912571 starting delivery 69: msg 182833 to local [EMAIL PROTECTED]
955981834.912621 status: local 1/10 remote 0/20
955981834.948440 delivery 69: success: did_1+0+0/
955981834.948474 status: local 0/10 remote 0/20
955981834.948502 end msg 182833
955981879.569947 new msg 182828
955981879.569969 info msg 182828: bytes 565 from <[EMAIL PROTECTED]> qp
1654 uid 101
955981879.687962 starting delivery 70: msg 182828 to local [EMAIL PROTECTED]
955981879.688012 status: local 1/10 remote 0/20
955981879.783965 delivery 70: success: did_1+0+0/
955981879.783999 status: local 0/10 remote 0/20
955981879.784027 end msg 182828
955981917.782600 starting delivery 71: msg 182832 to local
[EMAIL PROTECTED]
955981917.782654 status: local 1/10 remote 0/20
955981917.798585 delivery 71: deferral: Unable_to_chdir_to_maildir._(#4.2.1)/
955981917.798636 status: local 0/10 remote 0/20
955982007.792641 starting delivery 72: msg 182834 to local [EMAIL PROTECTED]
955982007.792692 status: local 1/10 remote 0/20
955982007.827664 delivery 72: success: did_1+0+0/
955982007.827697 status: local 0/10 remote 0/20
955982007.827725 end msg 182834
955982043.080259 new msg 182828
955982043.080281 info msg 182828: bytes 566 from <[EMAIL PROTECTED]> qp
1671 uid 101
955982043.188881 starting delivery 73: msg 182828 to local [EMAIL PROTECTED]
955982043.188931 status: local 1/10 remote 0/20
955982043.246276 delivery 73: success: did_1+0+0/
955982043.246310 status: local 0/10 remote 0/20
955982043.246337 end msg 182828
can you send us your ../control/me ../control/local files ?
Date sent: Tue, 18 Apr 2000 00:37:49 +1000
From: [EMAIL PROTECTED]
Organization: Oceania
To: [EMAIL PROTECTED]
Subject: mail not sending
My mail does not send mail outside of the localhost.
Mail for [EMAIL PROTECTED] gets droped into anthem.oceania.net
below is the log
Kevin
955981781.832465 end msg 182828
955981827.832963 starting delivery 68: msg 182831 to local [EMAIL PROTECTED]
955981827.833012 status: local 1/10 remote 0/20
955981827.915095 delivery 68: success: did_1+0+0/
955981827.915128 status: local 0/10 remote 0/20
955981827.915156 end msg 182831
955981834.912571 starting delivery 69: msg 182833 to local [EMAIL PROTECTED]
955981834.912621 status: local 1/10 remote 0/20
955981834.948440 delivery 69: success: did_1+0+0/
955981834.948474 status: local 0/10 remote 0/20
955981834.948502 end msg 182833
955981879.569947 new msg 182828
955981879.569969 info msg 182828: bytes 565 from <[EMAIL PROTECTED]> qp
1654 uid 101
955981879.687962 starting delivery 70: msg 182828 to local [EMAIL PROTECTED]
955981879.688012 status: local 1/10 remote 0/20
955981879.783965 delivery 70: success: did_1+0+0/
955981879.783999 status: local 0/10 remote 0/20
955981879.784027 end msg 182828
955981917.782600 starting delivery 71: msg 182832 to local
[EMAIL PROTECTED]
955981917.782654 status: local 1/10 remote 0/20
955981917.798585 delivery 71: deferral: Unable_to_chdir_to_maildir._(#4.2.1)/
955981917.798636 status: local 0/10 remote 0/20
955982007.792641 starting delivery 72: msg 182834 to local [EMAIL PROTECTED]
955982007.792692 status: local 1/10 remote 0/20
955982007.827664 delivery 72: success: did_1+0+0/
955982007.827697 status: local 0/10 remote 0/20
955982007.827725 end msg 182834
955982043.080259 new msg 182828
955982043.080281 info msg 182828: bytes 566 from <[EMAIL PROTECTED]> qp
1671 uid 101
955982043.188881 starting delivery 73: msg 182828 to local [EMAIL PROTECTED]
955982043.188931 status: local 1/10 remote 0/20
955982043.246276 delivery 73: success: did_1+0+0/
955982043.246310 status: local 0/10 remote 0/20
955982043.246337 end msg 182828
Ismal Hisham Mohd Darus
Asst. Manager, System Support
John Hancock Life Insurance (Malaysia) Berhad
defaultdomain contains
anthem.oceania.net
me contains
anthem.oceania.net
locals contains
anthem.oceania.net
oceania.net
.oceania.net
Kevin
|
hello, my problem is follow:
i compiled qmail, i'havent installed before. all
works fine, mysql patch work also.... but now where im confusing about
qmail:
HOWTO START?
itried different things out, im confused..... fact:
i have suse 6.2
1. isnt possbile to start qmail par inetd
?
1a. the smtpd
works, but the pop server not ? i saw in the
manual howto put smtpd in the inetd line,
but not pop3d or thaths the other
quest:
the tool works fine, but cant really i find
the ONE qmail manual (surly one of these lot of tons)
how to start, i have alltimes some failures, but i
dont know where to search the failure, because im confused...
3. it's the same file that i use for pop, when i
use mysql support
3a. and when, it depends if i use clear text or
crypted passwords in the mysql table ??
thanks...................
|
