Hi, bug report/feature request

2007-10-03 Thread Chris Lewis
Running 0.40 qpsmtpd-async as a spamtrap on both Linux and Solaris (2.8/2.9). [I use ordinary poll on Linux because my OS is too old] I've hacked qpsmtpd-async to support daemonization and pid locking files. Rather than dig into SVN, who should I send the modified copy to? Matt? I note th

Re: Hi, bug report/feature request

2007-10-03 Thread Chris Lewis
Robin Bowes wrote: John Peacock wrote: I'm sure that there is a platform-independent way to get the hostname How about: use Sys::Hostname; $host = hostname; Returns the non-qualified hostname (at least on this Solaris). I guess when it boils down to it, this machine is misconfigured. Sig

Re: Hi, bug report/feature request

2007-10-03 Thread Chris Lewis
John Peacock wrote: Chris Lewis wrote: I note that plugins/tls_cert clobbers the machine's name on Solaris. It issues `hostname --fqdn` in an attempt to find the machine's full name, and on Solaris, that's treated as setting the hostname to "--fqdn". Ouch. Sorry

Re: Hi, bug report/feature request

2007-10-04 Thread Chris Lewis
Matt Sergeant wrote: On 3-Oct-07, at 5:25 PM, James Turnbull wrote: Chris Lewis wrote: I've hacked qpsmtpd-async to support daemonization and pid locking files. Rather than dig into SVN, who should I send the modified copy to? Matt? Chris Since no one else answered the questio

Re: Hi, bug report/feature request

2007-10-04 Thread Chris Lewis
Chris Lewis wrote: Any idea why I'd be getting these: _convert_to_ssl failed (Could not create SSL socket: Socket operation on non-socket at ./plugins/tls line 158 [At end of _convert_to_ssl(), I'm logging $@ if it's non-null] I've confirmed, this is only happening i

Today's stupid question on qpsmtpd logging

2007-11-06 Thread Chris Lewis
I'm running very high loads, and I'd like to keep my qpsmtpd logs reasonably brief - leaving it only to have a one line record per email, plus any CRITICAL or higher error messages. qpsmtpd 0.40. I have the following two lines in my config at the front: logging/file loglevel LOGCRIT nosplit tsfo

Re: Today's stupid question on qpsmtpd logging

2007-11-06 Thread Chris Lewis
David Summers wrote: > Yes, I noticed this immediately also as soon as I switched to logterse. > > I'm probably going to send in a (simple) patch tonight as soon as I get > home. That'll be nice. Thx. I just hacked mine, but I prefer to stick to stock as much as possible. > Getting ready to p

Re: SPF question + patch

2007-11-06 Thread Chris Lewis
David Summers wrote: > > Today I noticed that I got some SPAM to root user that said it was from > root at my host. This shouldn't be possible because SPF should be > checking and rejecting forged mail that says it comes from my host when > it really comes from somewhere else. > > I turned on de

Re: Today's stupid question on qpsmtpd logging

2007-11-06 Thread Chris Lewis
David Summers wrote: > > Here is the patch which turns down logging in SMTP.pm. Noticable > when logterse plugin is used and debugging set to LOGWARN or above. > > Maybe this should be even set to LOGDEBUG instead of just LOGINFO? I made mine LOGDEBUG. I don't think qpsmtpd core (outside of th

Re: plugin: verify_not_forged

2007-11-07 Thread Chris Lewis
David Summers wrote: > MAIL FROM: <[EMAIL PROTECTED]> > RCPT TO: <[EMAIL PROTECTED]> > DATA > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > > Since the MAIL FROM is valid it was getting through SPF. > Since the From: was a valid address on my machine then it was getting > through TMDA. .

Re: DNS Error in SPF Plugin DENYing email?

2007-11-28 Thread Chris Lewis
Charlie Brady wrote: > > On Tue, 27 Nov 2007, Robert Schwartz wrote: > >> First the error (edited to protect the innocent! ;-) >> >> 2007-11-27 13:32 20088 Plugin sender_permitted_from, hook rcpt returned >> DENYSOFT, SPF error: SPF record error: DNS error while looking up >> mail.someones-domain

Re: qmail license change

2007-11-30 Thread Chris Lewis
David Nicol wrote: > This looks to me like, although he has PD'd the package, he intends to > retain the restrictions on > the qmail brand. If he's made it PD, he cannot impose any restrictions. The "please" recognizes that fact, and simply expresses a wish that people playing with qmail don't b

Re: accessing client socket state from plugin?

2007-12-21 Thread Chris Lewis
[EMAIL PROTECTED] wrote: > I'm currently developing a plugin which tries to connect back to the > client in order to check if it is a real smtp server. While it's an interesting exercise, I hope you're planning _lots_ of whitelisting. Large organizations (including us, including most of the big

Re: spam spam spam

2008-01-14 Thread Chris Lewis
Michael Salbinger wrote: > hi, > > my greylisting mechanism is blocking too much mails. > not only spam, its blocking web.de and so on. > how can i configure this thing right? > my denysoft_greylist.dbm has 290 ips in it. > am i able to delete it or such thing? I believe it's _supposed_ to do

Re: queue/smtp-forward ---> Does it queue when forward server is down?

2008-01-15 Thread Chris Lewis
Hanno Hecker wrote: > [Answer also to ML] > > On Tue, 15 Jan 2008 21:23:46 +0100 > "David Bouw" <[EMAIL PROTECTED]> wrote: > >> The only thing that makes me curious is that the sender's mailer will have >> to keep waiting for a response (code) till the mail has been completely >> forwarded: > [

Re: queue/smtp-forward ---> Does it queue when forward server is down?

2008-01-16 Thread Chris Lewis
re are any MTAs less than, say, 15 years old with >> such egregious behaviour, they should be shamed by public disclosure. > > Some older versions of Domino used to do that. I'm sure Chris Lewis will > pipe up with a more thorough list though :-) Probably not - mysterious b

Re: queue/smtp-forward ---> Does it queue when forward server isdown?

2008-01-17 Thread Chris Lewis
David Bouw wrote: > I don't know if I will run in any problems (libs etc) if I try to install a > new PERL package. (My experience with PERL is very limited, I solve most of > my problems with PHP scripts). One way of dealing with this is to segregate your software. I'm building a complex qpsm

Re: plugin changes, 0.3x forkserver -> 0.42 async

2008-01-18 Thread Chris Lewis
Brian Szymanski wrote: > Guy Hulbert wrote: >> On Fri, 2008-01-18 at 12:19 -0500, Matt Sergeant wrote: >> What kinds of things do plugins need to avoid in an asynchronous world? >>> Blocking. :-) >>> >> Could you elaborate a little on this or provide a reference (lin

Re: plugin changes, 0.3x forkserver -> 0.42 async

2008-01-18 Thread Chris Lewis
Matt Sergeant wrote: > On 18-Jan-08, at 3:34 PM, Brian Szymanski wrote: > >> Thanks all for your responses. So, to be clear, moving to -async from >> -forkserver should be a performance win, even if the plugins stay as >> they are? > > Still depends what your plugins are, and what your mail profi

Re: 'forking' transactions

2008-01-28 Thread Chris Lewis
Jared Johnson wrote: Peter J. Holzer wrote: That's why I wrote cf_wrapper (it's in the contrib directory), which checks the results for all recipients and returns a temporary error when they don't agree - when the client resends the message, it can "split" them into two groups with consistent re

Re: 'forking' transactions

2008-01-28 Thread Chris Lewis
Chris Lewis wrote: Jared Johnson wrote: Peter J. Holzer wrote: That's why I wrote cf_wrapper (it's in the contrib directory), which checks the results for all recipients and returns a temporary error when they don't agree - when the client resends the message, it can "

config wierdness

2008-02-14 Thread Chris Lewis
Running qpsmtpd-async 0.42rc1 on Solaris 2.9 (Yes, qpsmtpd runs rather well on that). Queueing (if any) is done by a homebrew Net::SMTP plugin. No qmail. Like Solaris usually does (grr), "hostname" returns the host node name (no dots), not the FQDN. config/me contains the FQDN, but $self->q

Re: config wierdness

2008-02-14 Thread Chris Lewis
Guy Hulbert wrote: On Thu, 2008-02-14 at 09:41 -0500, Chris Lewis wrote: Like Solaris usually does (grr), "hostname" returns the host node name (no dots), not the FQDN. This is correct behaviour. IYO, NMO ;-) Sun's hostname command, iirc, uses the hosts table and is

Re: config wierdness

2008-02-14 Thread Chris Lewis
Guy Hulbert wrote: On Thu, 2008-02-14 at 10:22 -0500, Chris Lewis wrote: Using FQDN in, say, "helo" isn't an unfortunate linux novelty, it's a requirement by RFC821/2821. RFC821/2821 do not say anything about the hostname command, afiak. That's a bit of a non-sequit

Re: config wierdness

2008-02-14 Thread Chris Lewis
Guy Hulbert wrote: On Thu, 2008-02-14 at 10:43 -0500, Chris Lewis wrote: BUT, here's the rub: even if you try to work around that by setting config/me to the FQDN, config(me) still returns `hostname`. This implies to me a bug in qpsmtpd's config handling. I think 'bug' i

Re: config wierdness

2008-02-14 Thread Chris Lewis
Guy Hulbert wrote: On Thu, 2008-02-14 at 11:45 -0500, Chris Lewis wrote: unnoticed because the definition of 'me' is redundant. It's beginning to look like someone broke config() between the version you're running and mine - I think mine is SVN head. I'm on r733 ..

Re: config wierdness

2008-02-14 Thread Chris Lewis
Chris Lewis wrote: Steve has walked tested the code in 0.40, and it works right there. 0.42rc1 (SVN head) doesn't. Hrm. SVN head returns qpsmtpd self-identifying as 0.42rc1, and it has the buggy caching code. SVN 0.43rc1 has the buggy caching code. SVN 0.42rc1 does _not_ have the

Re: config wierdness

2008-02-14 Thread Chris Lewis
Guy Hulbert wrote: On Thu, 2008-02-14 at 12:05 -0500, Chris Lewis wrote: That last change would break it -- the config_dir_memo thing is returned above. that would break _all_ config(), wouldn't it? config()'s on other than "me" work fine. I was wrong anyway. I

Re: config wierdness

2008-02-14 Thread Chris Lewis
Chris Lewis wrote: Guy Hulbert wrote: On Thu, 2008-02-14 at 12:05 -0500, Chris Lewis wrote: That last change would break it -- the config_dir_memo thing is returned above. that would break _all_ config(), wouldn't it? config()'s on other than "me" work fine. I

Re: config cache

2008-02-15 Thread Chris Lewis
Jared Johnson wrote: Hi, I noticed in the recent 'config weirdness' thread that QP does caching for config calls. Could anyone summarize the nature of this caching? I've got a lot of configuration directives of various sorts stored in a database and I'm looking at making a config plugin to h

Re: [qpsmtpd] stress testing

2008-04-27 Thread Chris Lewis
[EMAIL PROTECTED] wrote: On Sun, 27 Apr 2008, Baltasar Cevc wrote: On Apr 26, 2008, at 7:19 PM, [EMAIL PROTECTED] wrote: Can anyone recommend specific tools (or even algorithms or methodologies) Recently, there was a mail that a module called Test::SMTP was released on CPAN. Maybe that could

Re: async and tls

2008-05-01 Thread Chris Lewis
Douglas Hunter wrote: I only tested STARTTLS from the default port with the patch I supplied, but that seemed to work well. I'm just not confident enough with my async-fu to recommend that patch to other folks until it gets some more action and community vetting. But the tls plugin isn't a p

Re: Next steps to release?

2008-05-08 Thread Chris Lewis
Matt Sergeant wrote: So the next release I consider to be a fairly major step - we've got async/smtp-forward and async tls working. That's most of the showstoppers against using async in production. So what's missing and what would you like to see before the next release? (obviously not limit

Re: Connection notes and TLS

2008-05-22 Thread Chris Lewis
Charlie Brady wrote: On Wed, 21 May 2008, Hanno Hecker wrote: On Wed, 21 May 2008 10:39:37 -0400 (EDT) Charlie Brady <[EMAIL PROTECTED]> wrote: On Wed, 21 May 2008, Hanno Hecker wrote: - if you use the tls plugin, all connection notes are lost after the TLS setup is complete Why? Isn't th

Re: Connection notes and TLS

2008-05-23 Thread Chris Lewis
Matt Sergeant wrote: On 22-May-08, at 10:45 PM, John Peacock wrote: STARTTLS is not required to happen immediately after EHLO (not HELO, which doesn't support ESMTP extensions). And yes, you must completely discard every portion of the SMTP state that has occurred up to that point (just like

Re: Connection notes and TLS

2008-05-23 Thread Chris Lewis
John Peacock wrote: On a more pragmatic note: do we have any evidence whatsoever that spammers are using TLS at all? This may be a completely theoretical exercise, since AFAIK, all standard MTA's will switch to TLS as soon as the received the EHLO prompt, in which case there is no transaction

Pulling my hair out...

2008-05-28 Thread Chris Lewis
I'm trying to implement a subroutine shared between plugins. The library routine looks something like: sub createpattern {} And is stored under ../qpsmtpd/lib/NTMqplib.pm qpsmtpd-async is called from the qpsmtpd directory. Each plugin then calls it thusly: use NTMqplib; sub register ... {

Re: [svn:qpsmtpd] r923 - in trunk: . lib/Qpsmtpd

2008-06-02 Thread Chris Lewis
Matt Sergeant wrote: The Received headers won't change. Only the logs created by logterse or other logging plugins that use remote_host will change. That's a very very bad idea. How, exactly, are we supposed to have a plugin filter on NXDOMAIN and not TIMEOUT, or be able to detect DNS proble

Release tweak suggestion.

2008-07-04 Thread Chris Lewis
Can we please, pretty please, downgrade these messages: $self->log(LOGALERT, "from email address : [$from]"); $self->log(LOGALERT, "to email address : [$rcpt]"); $self->log(LOGALERT, "Message too big: size: $size (max size: $max_size)"); in lib/Qpsmtpd/SMTP.pm to below LOGWARN? Especially the f

Re: [qpsmtpd] Decisions, Decisions

2008-07-08 Thread Chris Lewis
[EMAIL PROTECTED] wrote: I believe I understand, but only from the very highest altitudes. It seems to me that there might be many places where it could be an issue, or that it could just as easily not be. I haven't seen any of the pollserver code or anything to suggest how it does what it does.

Annoying buglet in clamdscan plugin

2008-07-23 Thread Chris Lewis
If you take the "standard" ClamAV test executable (clam.exe), attach it to an email (I'm using swaks for testing) and send it thru qpsmtpd, the clamdscan plugin doesn't catch it. If you take a copy of the generated email (full headers), OR the bare executable, and run clamdscan (ClamAV command

Re: Annoying buglet in clamdscan plugin

2008-07-23 Thread Chris Lewis
Hanno Hecker wrote: On Wed, 23 Jul 2008 15:42:21 -0400 "Chris Lewis" <[EMAIL PROTECTED]> wrote: If you take the "standard" ClamAV test executable (clam.exe), attach it to an email (I'm using swaks for testing) and send it thru qpsmtpd, the clamdscan plugin do

Re: Annoying buglet in clamdscan plugin

2008-07-24 Thread Chris Lewis
Hanno Hecker wrote: Is there a quick way of doing this other than creating a new file, writing header->as_string and the body before stuffing in the clamd socket? Are you talking about clamscan or clamdscan? Clamdscan is just given the filename of the spool file, while clamscan is fed by qpsmtp

$transaction->body_filename;

2008-09-15 Thread Chris Lewis
According to the documentation, when you call $transaction->body_filename, you get a temporary file name that points at a file that contains the message. If you examine body_filename, it has no headers. The clamdscan plugin uses body_filename to hand off to clamdscan. Which means that ClamAV doe

Re: $transaction->body_filename;

2008-09-15 Thread Chris Lewis
Matt Sergeant wrote: > On Mon, 15 Sep 2008 16:40:24 -0400, Chris Lewis wrote: >> According to the documentation, when you call >> $transaction->body_filename, you get a temporary file name that points >> at a file that contains the message. If you examine body_filena

Re: $transaction->body_filename;

2008-09-16 Thread Chris Lewis
Matt Sergeant wrote: > On Mon, 15 Sep 2008 17:39:33 -0400, Chris Lewis wrote: >> Matt Sergeant wrote: >>> On Mon, 15 Sep 2008 16:40:24 -0400, Chris Lewis wrote: >>>> According to the documentation, when you call >>>> $transaction->body_filename, you ge

Re: DNSBL and answer id check missing

2008-09-27 Thread Chris Lewis
Matt Sergeant wrote: > On Sat, 27 Sep 2008 13:56:58 +0200, Diego d'Ambra wrote: >> To me it seems that plugin DNSBL is using Net::DNS bgsend/bgread, but >> is not checking the id of the reply received. >> >> If true this means that an attacker can white- or blacklist any email > > Thinking more

Re: DNSBL and answer id check missing

2008-09-29 Thread Chris Lewis
Charlie Brady wrote: > > On Sun, 28 Sep 2008, Ask Bj�rn Hansen wrote: > >> On Sep 28, 2008, at 12:01 AM, Diego d'Ambra wrote: >> >>> my $res = new Net::DNS::Resolver; >>> $res->tcp_timeout(30); >>> $res->udp_timeout(30); >>> $res->srcport(1024+int(rand(64511))); >> >> Shouldn't this fix be in

Re: $transaction->body_filename;

2008-09-29 Thread Chris Lewis
Matt told me that the body_filename not showing headers is actually an idiosyncracy of qpsmtpd-async, and behaves more like one would expect under qpsmtpd-forkserver etc. and that he had fixed that. Is that in SVN yet?

Latest SMTP.pm causes fatal errors

2008-09-29 Thread Chris Lewis
Running SVN head on Solaris 8 & 9, synchronized today. qpsmtpd-async FATAL PLUGIN ERROR: Can't coerce array into hash at /opt/NTM/lib/perl5/site_perl/5.8.8/Qpsmtpd/SMTP. pm line 132 during global destruction. Causes incomplete processing of _all_ email. When I take out this line (latest change

Re: Latest SMTP.pm causes fatal errors

2008-09-30 Thread Chris Lewis
Matt Sergeant wrote: > On Tue, 30 Sep 2008 08:34:05 +0200, Hanno Hecker wrote: >>> I'm confused why the error is caused - anyone better with perl than me >>> can help out? >> Same confusion here... and I cannot reproduce it. >> $ perl -v | grep 'This is perl' >> This is perl, v5.8.8 built for

header->add wierdness

2008-10-20 Thread Chris Lewis
I'm running qpsmtpd head (or thereabouts) async. Both Linux and Solaris. The behaviour I am reporting has _always_ been present through many previous iterations of qpsmtpd and "stock" spamassassin plugin. I'm only now trying to figure out how to get it swatted. I'm not sure at this point where

Re: header->add wierdness

2008-10-20 Thread Chris Lewis
Hanno Hecker wrote: > On Mon, 20 Oct 2008 10:42:17 -0400 > "Chris Lewis" <[EMAIL PROTECTED]> wrote: > >> For some reason, SpamAssassin insists on inserting its headers at the >> _beginning_ of the header block, whereas all the others insert theirs at >&g

Re: qpsmtpd smtp-forward 451 problem

2008-11-09 Thread Chris Lewis
Charlie Brady wrote: > > On Sat, 8 Nov 2008, Bj�rn Metzdorf wrote: > >>> Why does smtp-forward not adopt to the 550 from the internal >>> mailserver? >> >> I made a patch to address this problem in the "rcpt to" stage. >> Multi-recipient mails with one failing recipient will be a problem >> here

qpsmtpd-async doesn't set local_

2008-12-14 Thread Chris Lewis
qpsmtpd-async is missing settings for connection->local_ip and connection->local_port. Hence the p0f plugin (for example) won't work. [The p0f plugin doesn't work for other reasons too, I'll be getting a new copy sent in shortly.]

Re: qpsmtpd-async doesn't set local_

2008-12-16 Thread Chris Lewis
Matt Sergeant wrote: > Looks good. > > On Mon, 15 Dec 2008 08:06:28 +0100, Hanno Hecker wrote: >> The attached diff should fix it. If Matt says it's OK, I'll commit it >> later. The patch works for me. FYI: the current ident/p0f can't possibly work with the latest 2.0.8 p0f. Insufficient parame

Re: Install methods

2009-01-05 Thread Chris Lewis
Adam Prime wrote: > The default config probably isn't going to be (and shouldn't be IMO) > that useful to almost everyone on this list. To my mind, it should be > 'a drop in replacement for qmail', which to me reads that at it's base, > it accepts mail, and delivers it locally. That could be

Re: Install methods

2009-01-05 Thread Chris Lewis
Guy Hulbert wrote: > On Mon, 2009-05-01 at 08:29 -0500, Adam Prime wrote: >> set up a basic >> (extendable and documented) configuration. > > AFAIK, Makefile.PL (ExtUtils::MakeMaker) is not designed to do this > although it is probably possible. > > It should be easy/ier with Build.PL (Module::

Re: Unifying QP (was: RE: Install methods)

2009-01-05 Thread Chris Lewis
Jared Johnson wrote: > I don't imagine that this idea > of having everything wait for DATA will be adopted: it limits the > usefulness of plugins that could have rejected earlier, and in my mind > it doesn't really simplify the problem much. I'm not really suggesting that it be "adopted" in tha

Re: Unifying QP

2009-01-06 Thread Chris Lewis
Hanno Hecker wrote: > On Mon, 5 Jan 2009 15:11:06 -0600 > Jared Johnson wrote: > >> Chris Lewis wrote: >>> # I synthesize my own sessionid. Whatever happened to this in core? >>> my $session = $transaction->notes('sessionid'); >> Ano

Re: Unifying QP (was: RE: Install methods)

2009-01-06 Thread Chris Lewis
Jared Johnson wrote: > When we get all the way to DATA with ex. 2 recips, scan the message, and > one accepts it while the other wants to reject, we say 250 and then > quietly discard the second recip, effectively turning his 'reject' > preference into an 'ignore'. If we were going to go down

Re: Unifying QP (was: RE: Install methods)

2009-01-06 Thread Chris Lewis
David Nicol wrote: > You have to treat the whole address as the key to the preference > looker-upper, as SMTP allows recipients with multiple domains in the > same transaction. The latest release of tipjar::MTA (outbound) for > example organizes multiple recipients after an MX lookup instead of b

Re: Unifying QP (was: RE: Install methods)

2009-01-07 Thread Chris Lewis
Jared Johnson wrote: >> _Every_ filter reject _must_ result in a real reject back to the sender >> (by inline 5xx error). In this way we can ensure that someone is shown >> that it didn't get through, and we provide them with instructions on >> what to do to remediate a FP. By 250'ing the email,

Re: statistics on plugins?

2009-01-07 Thread Chris Lewis
David Nicol wrote: > Has anyone added a counter for results from installed plugins? Apropos the "unified" thread. By using a common logging format for all plugins, I generate metrics on both which plugin hit, and which plugin config entry caught it. Taking yesterday's, stripping out the individu

Re: [PATCH] Deprecate DECLINED with NEXT

2009-01-12 Thread Chris Lewis
David Nicol wrote: > For what it's worth, I like "NEXT" better than "DECLINED" too. > "DECLINED" brings to mind embarrassing failures to charge additional > purchases on maxed-out credit cards, or some other form of rejection. > "NEXT" carries no such nuance, being a familiar and functional flow >

Today's stupid question...

2009-01-14 Thread Chris Lewis
In my user verification plugin, I'm using the standard Qpsmtpd function: return Qpsmtpd::DSN->no_such_user("No such email address $address"); to generate no-such-user errors. I use other DSN functions for other errors as well. The above generates this, for example: 550 No such email address sd

Re: File Permissions bug?

2009-01-23 Thread Chris Lewis
Adam Prime wrote: > Charlie Brady wrote: >> But still very wasteful of system calls (and CPU). There are a million >> ways an admin could shoot herself in the foot - why should we check for >> this particular one over and over? > > I don't know the internals, but is the config really read over a

Re: End of headers hook

2009-02-09 Thread Chris Lewis
Jose Luis Martinez wrote: > Robert Spier escribió: >> The patch itself looks fine, I'm not sure whether we actually should >> support this or not. >> > > Why not? After all, if you don't need it, you don't use it. What about a > warning in the docs saying something like "be careful! If you drop

Re: tls plugins, server response time out

2009-02-10 Thread Chris Lewis
ari x wrote: Charlie Brady wrote: What problem are you trying to solve? Are you wishing to change the behaviour of qpsmtpd when somebody connects to it on port 465 using telnet (i.e. using telnet protocol rather than TLS)? Do you have a problem with too many people connecting via telnet and

Re: Released v0.80!

2009-03-05 Thread Chris Lewis
Not sure what's going on here: FATAL PLUGIN ERROR [logging::file]: Can't call method "notes" on unblessed reference at ./plugins/logging/file line 272. It's 0.80, only plugins: logging/file loglevel LOGDEBUG /opt/NTM/logs/qpsmtpd.log.%Y-%m-%d dont_require_anglebrackets acceptall queue/maildir

Re: perltidy

2009-04-03 Thread Chris Lewis
Matt Sergeant wrote: On Fri, 3 Apr 2009 08:38:59 -0500, Jared Johnson wrote: first of all, kudos on the frequent releasing :) I've attached a suggested patch to .perltidyrc. I've been playing around with perltidy'ing all QP code and some results I don't like. This doesn't fix all the things

Re: [qpsmtpd] accept without delivery

2009-04-06 Thread Chris Lewis
b-sub-564...@rope.net wrote: I have a routine that I'm working on that is still rather imperfect. Ideally, it would identify a particular type of spam and then reject it, as other modules do. However, since there are too many false positives, I have been rejecting, but also sidelining a copy of i

Re: Requeue Mails

2009-04-21 Thread Chris Lewis
Ask Bjørn Hansen wrote: On Apr 20, 2009, at 9:10, jan wrote: i forward the mails via smtp plugin. Now the receiving Mailserver had some Problems. How can i restart sending for mails in /var/spool/ qpsmtpd? Hi Jan, The default SMTP plugin doesn't queue the mails. The sending mail servers

Re: greylisting pugin

2009-04-21 Thread Chris Lewis
GG Noris wrote: -Original Message- From: Ask Bjørn Hansen [mailto:a...@develooper.com] Sent: Tuesday, April 21, 2009 7:41 PM To: GG Noris Cc: qpsmtpd@perl.org Subject: Re: greylisting pugin On Apr 21, 2009, at 10:15, GG Noris wrote: is possible with the plugin greylisting check, for

Re: SMTP AUTH with PAM and CRAM-MD5

2009-05-10 Thread Chris Lewis
John Peacock wrote: 4) Change your startup script to also bind to port 465 (e.g. with forkserver add --port 465) FYI: With both port 25 and 587 you connect to in plaintext, and can "upshift" to SSL via STARTTLS command (if the server is configured for it). With port 465, the whole connect

Re: newer check_spamhelo

2009-05-10 Thread Chris Lewis
Charlie Brady wrote: http://markmail.org/message/sckrkzhtft34rqgg Does anyone have existing literal badhelo matches which might match a valid helo hostname if interpreted as an RE? This might be a good opportunity to introduce standardization into pattern matching plugins with common config

Re: Dealing with joe-job attacks?

2009-05-13 Thread Chris Lewis
You may want to look into BATV. It works this way (very roughly, see the spec for real details) Every email you send has a MAIL FROM modified (somewhat ala SRS) to contain a key as part of the LHS. Every time you receive an email with a null MAIL FROM, check the RCPT TO. If the key is not t

Re: qpsmtpd-async authenticated relaying direction request

2009-05-27 Thread Chris Lewis
David Favor wrote: I'm currently running qpsmtpd-async. I host many domains and I'd like to protect them all against backscatter using something like this: http://psg.com/~brian/software/authbounce/configure-authbounce.txt to add a bounce key to each outgoing message of the form: X-

Re: PATCH [1/5] Disconnect badhelo

2009-06-19 Thread Chris Lewis
Charlie Brady wrote: It's not as though there are any SMTP clients out there which will try again with a different helo host. Unless there is a spambot tuned for this qpsmtpd plugin. There are plenty of bots that do that. I don't understand your statement here. In what way would any client b

Re: PATCH [1/5] Disconnect badhelo

2009-06-19 Thread Chris Lewis
Jared Johnson wrote: I like this approach, but it's had its complications for us because we don't want to make the compromise of doing the rest of the checks at a given stage needlessly; e.g. if our RBL plugin hits, we don't want to bother doing RDNS and SPF lookups only to say 'sorry, you were

Re: PATCH [1/5] Disconnect badhelo

2009-06-22 Thread Chris Lewis
Baltasar Cevc wrote: What should be considered, when talking about switching to such a (even if only slightly) more complicated model: it makes the start with Qpsmtpd more difficult. I consider the simplicity of the plugin scheme one of the major strengths of qp. I can just install it and

Re: Plugin design - was: Re: PATCH [1/5] Disconnect badhelo

2009-06-23 Thread Chris Lewis
Baltasar Cevc wrote: Hi, On Jun 22, 2009, at 3:48 PM, Chris Lewis wrote: Most _other_ decent filtering environments work like this. Mailshield, SpamAssassin, etc. I agree; however, their approach is unlike qpmsptd's. To tweak Spamassassin, for example, I will first proabably add o

Re: Logging improvements (was Re: PATCH [1/5] Disconnect badhelo)

2009-06-23 Thread Chris Lewis
Charles B wrote: Thanks for the plug for logterse, Chris :-) You're welcome. The existing logging infrastructure didn't do it for me ;-) Are we perhaps in need of a two-channel logging strategy where all debug/error messages go to stderr and stdout just logs a [terse :-)] one-line summa

Re: how to write a plugin to smtp forwad to multiple servers in RR mode

2009-07-25 Thread Chris Lewis
Charlie Brady wrote: On Sun, 26 Jul 2009, Junyi-HUANG wrote: Robin Bowes Wrote: Take a look at the queue/smtp-forward plugin. I'm pretty sure it would be trivial to modify that to deliver to specific servers based on header content. Thanks much Robin, yes , i agree . i think of queue/smtp

Re: session-id for qpsmtpd

2009-07-25 Thread Chris Lewis
Aleksandar Lazic wrote: Dear List, I use the qpsmtpd with the qpsmtpd-forkserver and syslog server logging. logging/syslog loglevel LOGDEBUG I must create some reports and the tools on http://www.hjp.at/projekte/qpsmtpd/log-tools/ are not able to analyze this log, so I have tried to create

Re: session-id for qpsmtpd

2009-07-26 Thread Chris Lewis
Aleksandar Lazic wrote: I have solved this issus with this steps: 1.) add in plugins/connection_time in hook_pre_connection $self->qp->connection->notes('sessionid',gettimeofday()); Your sessionids won't be unique across multiple MAIL FROM->DATA transactions during the same connection.

Re: session-id for qpsmtpd

2009-07-27 Thread Chris Lewis
Aleksandar Lazic wrote: . push (@{$related->{$uniq_key}->{'TO'}},$1.'@'.$2); . . Of course if there is a better way for the correleation I'am open for suggestion ;-) The thing is that unless you have only one long-running qpsmtpd process, you can't "see" the records from other instances.

Re: invalid sender creates havoc

2009-07-29 Thread Chris Lewis
Jared Johnson wrote: We recently noticed a message in our postfix queue that thought it was addressed to " foo.com". After examining it, it turned out that Qpsmtpd accepted a MAIL FROM command formatted like so: MAIL FROM: When it passed it to postfix, it transmographied it first into the s

Re: invalid sender creates havoc

2009-07-29 Thread Chris Lewis
Lewis, Chris (CAR:W669) wrote: Here's a useful meta-reference: http://www.rfc-ignorant.org/rfcs/rfc2821.php#page72 an search for "source route". I didn't mention: there is now no good reason whatsoever to accept source routes - they date back to the arpanet. It's been deprecated since RFC

Re: Patching require_resolvable_fromhost

2009-07-30 Thread Chris Lewis
Charlie Brady wrote: On Wed, 29 Jul 2009, Larry Nedry wrote: Hi All, The require_resolvable_fromhost plugin returns DENYSOFT when a host doesn't resolve. This makes sense with a well behaved host. But I've noticed that some hosts that don't resolve will continuously retry and never seem to d

Re: drop module

2009-08-09 Thread Chris Lewis
Tobias Knecht wrote: Hi, weired idea. ;-) We are using qpsmtpd as a spamtrap MTA. The mails are stored in a MailDir and after that beeing analyzed by some scripts. Sometimes it happens that the scripts are not fast enough to handle all stored email. Is there a way to receive messages, but drop

Re: Move clamav headers at top

2009-11-05 Thread Chris Lewis
Shad L. Lords wrote: Filippo Carletti wrote: Without the details and without an inline patch, I can't apply this. Sorry for having been terse. I don't have the details, I've been told that message signing fails if headers are added at bottom. This patch move them on top: Headers should always

Re: Received: in DKIM

2009-11-05 Thread Chris Lewis
Johan Almqvist wrote: On 5. nov. 2009, at 20.38, Shad L. Lords wrote: Johan Almqvist wrote: Are you sure you're not confusing this with SpamAssassin expecting 'From_' lines in /var/spool/mail-format mailboxes (see RFC-976)? That is what I'm referring to. And I think I was confused on the p

TLS, certificates and qpsmtpd.

2010-01-21 Thread Chris Lewis
Is anyone here familiar enough with IO::Socket::SSL et. al. to give me some hints as to how I can extract X.509 certificate information from a tls session? Most TLS-capable mail servers insert X.509 info into the headers - Name, issuer name, etc. Qpsmtpd's tls support only inserts the encrypt

Re: Enemieslist

2010-01-25 Thread Chris Lewis
Johan Almqvist wrote: On 24. jan. 2010, at 12.28, Peter J. Holzer wrote: See http://enemieslist.com/how/use.html (The front page says this is "not currently available for public use", but it seems to be) For example, if the client sends EHLO smtp28.orange.fr (taken from a random spam message),

Re: Plugin for recipient specific black-white-list?

2010-02-04 Thread Chris Lewis
Michael Papet wrote: - in the end easy to configure with a web frontend The web front end is totally separate from qpsmtpd. My grand scheme was to use Drupal+LDAP modules to do the web frontend. I've worked with Drupal enough to do this, just never taken the time to do it. Maybe someone e

Re: Switching to qpsmtpd, a few questions

2010-02-17 Thread Chris Lewis
llion day works out to when your server is busiest) shouldn't be a problem. If you do spamassassin and such, that will be the resource intensive part. qpsmtpd might help over other MTAs though in filtering more of the mail in cheaper ways first. 2. How fast is this (I've read Chr

Re: New plugin: smtptls-forward

2010-03-30 Thread Chris Lewis
On 3/30/2010 4:08 PM, Matt Sergeant wrote: On Tue, 30 Mar 2010, Charlie Brady wrote: On Thu, 25 Mar 2010, Jason Mills wrote: I wrote this plugin to help me with my local debugging. Basically a heavily modified version of smtp-foward. I'd recommend you search the archives and find some earli

Redirecting email

2010-05-04 Thread Chris Lewis
Very old version of qpsmtpd, but this should still be more-or-less the same. I'm trying to substitute a recipient address very early on in processing so that every subsequent plugin sees the new value. I'm trying this as the very first plugin listed in the config file: use Qpsmtpd::Address;

Re: Redirecting email

2010-05-05 Thread Chris Lewis
On 5/5/2010 4:07 AM, Steve Kemp wrote: I hope that helps. It was based upon a thread in the archive a while back but I cannot immediately find the discussion link, even though I started it by asking a question similar to yours! I remembered that thread, but I couldn't find it either.

  1   2   >