HardQuota Bug in all Vpopmail versions

2001-01-17 Thread Tamer Hassan
rsion 4.9.6-1 most with a default quota of 5 megs and I was able to send the test user emails with more than 10 megs of attachments. (sqwebmail 1.0 through 1.2.0 were used on the vpopmail installations I tested). Best Regards, Tamer Hassan

Re: HardQuota Bug in all Vpopmail versions

2001-01-17 Thread Tamer Hassan
Hrm, Getting even weirded, I tried resetting a test user to 5000 bytes and he would seccessfully get any messages "with attachments" less than 5k. Then I set the quota to 500 (about 5 megs) and I am able to send him more than 10 megs of attachments in several messages. I am really confused

RE: HardQuota Bug in all Vpopmail versions

2001-01-18 Thread Tamer Hassan
>With all due respect, I did some of my own testing of vpopmail last year >and found that then, the quota mechanism didn't work (I was able to send >more than the quota's worth of messages using small messages (and a perl >script to send it rapidly). With all due respect, this method sucks. You

vchkpw lacking authentication security

2001-01-18 Thread Tamer Hassan
To everyone on the vchkpw mailing list: If anyone knows of a way to force vpopmail to use MD5, please let me know.

Re: HardQuota Bug in all Vpopmail versions

2001-01-19 Thread Tamer Hassan
nd the fourth message, it should bounce back. However, I doubt it. Try even sending a fifth and a sixth. :/ Let me know what you get Best Regards Tamer Hassan

vpopmail lacks authentication security

2001-01-19 Thread Tamer Hassan
an-1.5/doc/DES.html Please, stop talking about your great inventions ssh'ing your pop server connections. If you administered hotmail or yahoo, would you do that? Best Regards Tamer Hassan The only secure computer is one that's unplugged, locked in a safe, and buried 20 feet under th

RE: vpopmail lacks authentication security

2001-01-21 Thread Tamer Hassan
>By itself, pretty much every piece of a security program is insecure. Hrm, is that a joke? >You claim >to be smart enough to make such a claim yet you don't know how to teach your >sytem to crypt using libraries other than the defaults. My system uses MD5 (blowfish) and 3DES (Triple DES). Do n

RE: FreeBSD Cryptography 101 - WAS - RE: vchkpw lacking authenticatio n security

2001-01-21 Thread Tamer Hassan
>From: Joe Modjeski >BEWARE THOUGH. Changing the symlinks from DES to MD5 on a production system >is crazy. Any users with DES passwords will no longer be able to access the >box. This makes things UGLY. Please learn from my experience as I had to >learn this one the hard way :( I do not s

vqsignup.cgi

2001-01-22 Thread Tamer Hassan
pts. Make sure that "submit" and action in your php scripts posts what is required (username, domain, and password) to the vqsignup.cgi binary. I know why you ask this, it is probably because most people want to archive stuff like "First" and "Last" name, etc. and save

vpopmail quota suggestions

2001-01-22 Thread Tamer Hassan
ver comes first. THe message limit could also be ommited. By the way, this works better than the HARDQUOTA feature in vpopmail, just a personal opinion. Best Regards, Tamer Hassan [EMAIL PROTECTED]

mysql+vpopmail question

2001-01-25 Thread Tamer Hassan
Is it possible to get vpopmail/vchkpw (with mysql support) to store passwords in clear text? The reason why I am asking this is would like a "password retrieval feature" using a hint question (like in hotmail), using a php script I wrote (cracking the hashes would be silly). :P Thanks, Tamer

Re: mysql+vpopmail question

2001-01-25 Thread Tamer Hassan
Daniel Hardaker writes: >> Is it possible to get vpopmail/vchkpw (with mysql support) to store >> passwords in clear text? The reason why I am asking this is would like a >> "password retrieval feature" using a hint question (like in hotmail), > using >> a php script I wrote (cracking the hashes

virtual user quota

2001-02-07 Thread Tamer Hassan
a phone call :) Any suggestions are appreciated! Best Regards, Tamer Hassan

Re: virtual user quota

2001-02-08 Thread Tamer Hassan
Correction, .current_size is generated the user's home directory by the "deliverquota" program that is also bundled with sam varschak's sqwebmail. It is not associated with vdelivermail (vpopmail's vdelivermail) as I earlier said. But an example of current user qutota usage is already incorpo

Replication

2001-02-12 Thread Tamer Hassan
What are good approaches for setting up mail server replication? Which is more recommended in such environment: mysql or cdb? How stable is it with mysql? I read about an approach using NFS but also warned about MySQL file locking and NFS problems nuking the tables. Could this be avoided, i.e.

Very high CPU Usage!!

2001-02-18 Thread Tamer Hassan
Hi, I have been running vpopmail for a long while and it was very smooth. Now I recently upgraded to 4.9.8 (still using cdb) and i am hosting only 10 domains on that box. After a while, I was logging on to the box and noticed it is slow (P-III 650 Mhz., 128MB PC133 Ram) so i wondered why! I

Re: Very high CPU Usage!!

2001-02-21 Thread Tamer Hassan
B>Check the list archive. There was a thread on this a few weeks ago. The B>apparent cause was compiler shipped with RH7.0, I believe. >-Bill Actually, I am not running RH7.0. I am running debian 2.2 r2(glibc21+egcs). Now I had to kill the processes manually. I have only seen this problem