HOWTO: qmail vpopmail qmail-scanner courier squirrelmail

blubbi · Posted: Tue Apr 27, 2004 8:53 am Post subject:

SMTP-AUTH

Okay, here's a bit info on how it works.
http://www.fehcom.de/qmail/smtpauth.html

Relay-ctrl (SMTP-After-POP)

It is quite self explaining.
Any user must first check his incoming mail with POP3 or IMAP, if this is permitted, the user is for a period of time allowed to relay outgoing mail throug the server he made the pop3/imap connection to. This is accomplished by remembering the POP3 clients' IP. Every SMTP request for relaying outgoing mail is checked against the list containg the POP3 clients IP address. Is the IP address in that list the SMTP connection is granted, if the IP is not in the list, the SMTP client is not allowed to relay. The list of IP's is periodically cleaned of old adresses, so relaying is not longer permitted as necessary.

TCPRules (ucspi-tcp)

For infos on how TCPRules (ucspi-tcp) work have a closer look here http://cr.yp.to/ucspi-tcp.html
_________________
-->Please add [solved] to the initial post's subject line if you feel your problem is resolved.
-->Help answer the unanswered

http://olausson.de

Naspe · Posted: Tue Apr 27, 2004 1:59 pm Post subject:

Now it all working (i think) 1 more question...
I have installed everything as the guide says but don't know what to do know to configure the antispam (SpamAssasins, pryzor, razor, dcc...)

What i have to do now?
_________________
God Is Real... Unless Declared As Integer...

Provoca Il Più Bravo... Morirai Come Uno Schiavo!!!

Hai Evocato Il Tuono!!! Ora Raccogli Tempesta!!!

blubbi · Posted: Tue Apr 27, 2004 3:14 pm Post subject:

Take a closer look on my howto. For the link, see my signature.

btw. Is SMTP-AUTH working?
Which howto did you use?
_________________
-->Please add [solved] to the initial post's subject line if you feel your problem is resolved.
-->Help answer the unanswered

http://olausson.de

Naspe · Posted: Wed Apr 28, 2004 9:00 am Post subject:

Tnx a lot for your help. I'll try this evening to follow your guide.

blubbi · Posted: Wed Apr 28, 2004 3:14 pm Post subject:

Skywacker · n00b Joined: 23 Jan 2004 Posts: 72 Location: Missouri

Anyone else noticing F-prot missing viruses if they are zipped? I've checked and it is set by default to scan inside archives.

Also, anyone know how to make Spamassassin show how it gives a certain score per email? I've seen examples on the web where people can see an email got .2 points for one test, 1.4 for another, etc.

Thanks,
Skywacker

Skywacker · n00b Joined: 23 Jan 2004 Posts: 72 Location: Missouri

Update-

1)qmail-scanner-queue.pl has an option to force_unzip. I changed this to 1 and will inform if this solved qmail-scanner/f-prot missing viruses when they were zipped.

2)In /usr/share/spamassassin/local.cf, these two lines are not working -
report_header 1
use_terse_report 1

I even tried report_header 0 to put the spam report details into the body, but it did not work.

3)Hopefully someone can tell help me with this #2, but for a quick fix I just did a -

spamc -r < mailmessage

and it gave me the details of which tests were triggered.

-Skywacker

Naspe · Posted: Mon May 03, 2004 12:28 pm Post subject:

Sincerly i'm not sure if i am or not an open rely... May be i lost something...

I followed this guide (the first post of this topic...) is it ok?

Btw now i have a big problem.
2 days ago my server shutted down for power failure...

When i started it again i found a big big problem: can no more log into my server to see the emails... No 1 can login neither with squirrelmail or outlook. I tryed to log in with qmailadmin and i can do it... Can't understand wy i can't login with squirrelmail/email-client...
Any suggestions? All services semms to be up and running...

svscan is up...
courier-imapd is up...
courier-pop3d is up...
mysqld is up...

Did i forget anything?

Tnx a lot for your support guyz

_________________
God Is Real... Unless Declared As Integer...

Provoca Il Più Bravo... Morirai Come Uno Schiavo!!!

Hai Evocato Il Tuono!!! Ora Raccogli Tempesta!!!

Skywacker · n00b Joined: 23 Jan 2004 Posts: 72 Location: Missouri

First off I recommend studying (not just reading) http://www.lifewithqmail.org/lwq.html

Check things first locally on the server, then from outside.

Network card up and running?
Can you ping to your local network?
Can you ping outside your network?
Did you look in /var/log/messages for boot problems?

Send a test message to your hotmail account (or any outside email account you can check that is independent of this mail server.) On the command line type: #mail joe@hotmail.com
Cntrl-D sends the message. Any errors?

Telnet localhost 110 (to check Pop3).
USER test@accountonyourserver.com
PASS yourpass
Any errors?

What does "svstat /service/* " show? It should return something like this-

/service/qmail-send: up (pid 5707) 3597801 seconds
/service/qmail-smtpd: up (pid 5701) 3597801 seconds

Remember also that Outlook and other email clients may be using Pop3 or IMAP where as Squirrelmail always uses IMAP.

Turn on Debugging information in /etc/courier-imap/pop3d or imapd: DEBUG_LOGIN=2
Then restart courier: /etc/init.d/courier-imapd restart
and .../courier-pop3d restart

Look in /var/log/messages. If this file's gotten too big for you, you need to setup logrotate. Search the forums...

Hope this can get you started. I didn't actually explain how to fix anything cuz we need more information.

-Skywacker

Naspe · Posted: Mon May 03, 2004 7:15 pm Post subject:

Tnx a lot for your help. I made all checks u suggested:

The server is fully accesible from outside.
I can ping everything

Thera are no boot problems (it seems).
I can send email messages to everyone using my server.
If i send a message from an hotmail account to my server there are no errors.
With telnet i get -ERR Login Failed.
svstat is ok, everything up and running.
Tryed Outlook with both IMAP and POP3... Always auth err...
Turned on DEBUG 2... I can see the pass clearly... (may be it is the problem? In mysql the pass is encrypted...)

I think there is something wrong with the auth process

. May be i forgot to start anything? Or may be a file is fucked up?

Tnx again for your help!!!

_________________
God Is Real... Unless Declared As Integer...

Provoca Il Più Bravo... Morirai Come Uno Schiavo!!!

Hai Evocato Il Tuono!!! Ora Raccogli Tempesta!!!

Skywacker · n00b Joined: 23 Jan 2004 Posts: 72 Location: Missouri

Are you using the full email address for the username?

username= user@fullemailaddress.com
password= yourpass

Naspe · Posted: Mon May 03, 2004 8:44 pm Post subject:

Found the problem

I started authdaemond. Now everything works fine. That f@#%&*g daemon wasn't on default runlevel and i didn't see that it isn't working...

Now i have to check not to be an open relay server and how to crypt passwords...
_________________
God Is Real... Unless Declared As Integer...

Provoca Il Più Bravo... Morirai Come Uno Schiavo!!!

Hai Evocato Il Tuono!!! Ora Raccogli Tempesta!!!

Naspe · Posted: Wed May 05, 2004 10:28 am Post subject:

As i said i followed this guide to set up mi server.
Is the smtp-auth enabled? How can i test if i am an open rely or not?
_________________
God Is Real... Unless Declared As Integer...

Provoca Il Più Bravo... Morirai Come Uno Schiavo!!!

Hai Evocato Il Tuono!!! Ora Raccogli Tempesta!!!

Skywacker · n00b Joined: 23 Jan 2004 Posts: 72 Location: Missouri

google on how to test if you are an open relay. tons of free services that will check your site for you in a matter of seconds.

as far as encrypting passwords: yes they are encrypted in the mysql database. but with pop3/imap they are sent from the client in clear text. You need to use ssl for imap/pop3 to encrypt the password/message when sending. I don't have this setup so I can't comment.

There is a 3rd howto mentioned in the middle part of this thread. It's not sabrex and it's not blubbi's. It will get both smtp-auth and ssl working for you.

-Sky

Pardok · n00b Joined: 30 Mar 2004 Posts: 29

Blubbi,

Wanted to say that I tried your How-To again and now everything works perfectly!

Thank you for the wonderful document and info.

MadOtis · Posted: Thu May 06, 2004 5:55 pm Post subject:

I've a problem that I haven't seen answered here... I've followed the instructions in the original post. All seems well except one problem...
I can't seem to read any mail with anything other than Mutt! Mutt shows all new e-mail just fine. But, if I use Evolution or Sylpheed, I get no new e-mail messages displayed in my inbox (for POP3), or in my folders (using IMAP).

What do I need to post that would help diagnose the problem?

Thanks in advance!

blubbi · Posted: Fri May 07, 2004 12:59 am Post subject:

MadOtis · Posted: Fri May 07, 2004 1:15 am Post subject:

Yes, I've double checked... vpopmail is installed and running. Courier-imap is using vchkpw for both IMAP and POP3 as well, and they are authenticating the virtual users just fine.

I CAN configure Evolution to use local maildir, and in that mode, it shows the new mail. But, I'm setting this up primarily for remote retrieval of personal and some friend's email, so, I really need the IMAP or POP3 interfaces to work.

blubbi · Posted: Fri May 07, 2004 10:30 am Post subject:

try to connect via telnet to pop3 or imap ... take a look in the logs and tell us what you see. Turn debugging on for imap ond pop3d.
_________________
-->Please add [solved] to the initial post's subject line if you feel your problem is resolved.
-->Help answer the unanswered

http://olausson.de

MadOtis · Posted: Fri May 07, 2004 11:17 am Post subject:

I'm REALLY new to setting this stuff up... how do I turn on debugging for Courier? I know how for Postfix, but not Courier.

Again, thanks in advance.

blubbi · Posted: Fri May 07, 2004 4:31 pm Post subject:

sabrex · n00b Joined: 28 Nov 2003 Posts: 45

I have posted a new HOWTO. It is basically the same, but eliminates the Maildir / .maildir problems associated with older vpopmail versions. The new HOWTO also uses the latest versions of all available components of this setup (masked or not), and thus it may potentially be less stable.

In practice, however, I have found it far more capable and robust than this older configuration.

The new HOWTO is located at https://forums.gentoo.org/viewtopic.php?t=171499

rjreb · n00b Joined: 19 Aug 2003 Posts: 40

I may have missed this after my initial installation I got this

rjreb · n00b Joined: 19 Aug 2003 Posts: 40

arachn1d · Posted: Wed Jun 16, 2004 1:20 am Post subject:

i get this error