The qpopper list archive ending on 1 Jun 2001
Topics covered in this issue include:
1. Re: user can not get messages
Randall Gellens <randy at qualcomm dot com>
Tue, 29 May 2001 18:09:44 -0700
2. Re: compiling problems
Randall Gellens <randy at qualcomm dot com>
Tue, 29 May 2001 18:13:15 -0700
3. Re: qpopper.config
applein <applein at tutopia.com dot br>
Tue, 29 May 2001 22:26:54 -0300
4. Re: qpopper.config
Randall Gellens <randy at qualcomm dot com>
Tue, 29 May 2001 18:20:06 -0700
5. Re: qpopper.config
Randall Gellens <randy at qualcomm dot com>
Tue, 29 May 2001 18:20:48 -0700
6. RE: compiling problems
"Eduardo A. Alcocer Rosado" <ealcocer at hotmail dot com>
Wed, 30 May 2001 10:27:24 -0500
7. 4.0.2 and qpopper.org
rick pim <rick at post.queensu dot ca>
Wed, 30 May 2001 13:44:13 -0400
8. Re: 4.0.2 and qpopper.org
"Kenneth Porter" <shiva at well dot com>
Wed, 30 May 2001 11:06:21 -0700
9. Re: 4.0.2 and qpopper.org
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 09:09:36 -1000
10. Re: 4.0.2 and qpopper.org
"Kenneth Porter" <shiva at well dot com>
Wed, 30 May 2001 12:25:36 -0700
11. Re: compiling problems
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 09:26:13 -1000
12. RE: compiling problems
Randall Gellens <randy at qualcomm dot com>
Wed, 30 May 2001 12:33:38 -0700
13. Re: 4.0.2 and qpopper.org
Randall Gellens <randy at qualcomm dot com>
Wed, 30 May 2001 12:27:42 -0700
14. Re: 4.0.2 and qpopper.org
"Kenneth Porter" <shiva at well dot com>
Wed, 30 May 2001 13:59:21 -0700
15. Re: 4.0.2 and qpopper.org
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 10:41:32 -1000
16. Re: 4.0.2 and qpopper.org
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 11:14:37 -1000
17. RE: compiling problems
"Eduardo A. Alcocer Rosado" <ealcocer at hotmail dot com>
Wed, 30 May 2001 17:19:44 -0500
18. RE: compiling problems
Randall Gellens <randy at qualcomm dot com>
Wed, 30 May 2001 15:23:13 -0700
19. re: servermode
David Elkins <elkinsd at hurrah dot com>
Wed, 30 May 2001 15:36:19 -0700 (PDT)
20. Re: servermode
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 13:32:19 -1000
21. Another question with server mode
Clifton Royston <cliftonr at lava dot net>
Wed, 30 May 2001 14:15:20 -1000
22. Re: 4.0.2 and qpopper.org
Gregory Hicks <ghicks at cadence dot com>
Wed, 30 May 2001 19:13:05 -0700 (PDT)
23. Re: 4.0.2 and qpopper.org
"Matt Garretson" <mattg at assembly.state.ny dot us>
Thu, 31 May 2001 10:40:29 -0400
24. download mail from many mailboxes using qpopper ?
"geocad" <geocad at qualitynet dot net>
Thu, 31 May 2001 17:40:51 +0300
25. Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Eric Luyten <Eric.Luyten at vub.ac dot be>
Thu, 31 May 2001 17:30:56 +0200 (MET DST)
26. Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
The Doctor <doctor at doctor.nl2k.ab dot ca>
Thu, 31 May 2001 10:46:19 -0600
27. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
"Kenneth Porter" <shiva at well dot com>
Thu, 31 May 2001 12:28:04 -0700
28. Re: Outlook Express - - Qpopper - - Openssl
"Christopher Crowley" <ccrowley at tulane dot edu>
Thu, 31 May 2001 14:42:55 -0500
29. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
The Doctor <doctor at doctor.nl2k.ab dot ca>
Thu, 31 May 2001 14:00:10 -0600
30. Change to [AUTH] error message for use of non-auth file?
Clifton Royston <cliftonr at lava dot net>
Thu, 31 May 2001 10:16:01 -1000
31. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
"Christopher Crowley" <ccrowley at tulane dot edu>
Thu, 31 May 2001 15:16:23 -0500
32. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
"Kenneth Porter" <shiva at well dot com>
Thu, 31 May 2001 13:47:21 -0700
33. download mail from many mailboxes using qpopper ?
Simon <geocad at qualitynet dot net>
Thu, 31 May 2001 23:55:48 +0300
34. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
"Kenneth Porter" <shiva at well dot com>
Thu, 31 May 2001 15:23:51 -0700
35. Re: download mail from many mailboxes using qpopper ?
"Kenneth Porter" <shiva at well dot com>
Thu, 31 May 2001 15:25:46 -0700
36. Unsbscribe
"Queticon@verizon dot net" <res087jh at verizon dot net>
Thu, 31 May 2001 18:38:51 -0400
37. Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Clifton Royston <cliftonr at lava dot net>
Thu, 31 May 2001 12:50:54 -1000
38. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
The Doctor <doctor at doctor.nl2k.ab dot ca>
Thu, 31 May 2001 16:55:30 -0600
39. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
"Kenneth Porter" <shiva at well dot com>
Thu, 31 May 2001 16:56:40 -0700
40. Re: 4.0.2 and qpopper.org
Alan Brown <alan at manawatu.gen dot nz>
Thu, 31 May 2001 22:12:35 -0500 (CDT)
41. Re: 4.0.2 and qpopper.org
Clifton Royston <cliftonr at lava dot net>
Thu, 31 May 2001 17:18:15 -1000
42. Re: servermode
Tim Olson <tolson at unionsemiconductor dot com>
Thu, 31 May 2001 23:33:47 -0500
43. Re: servermode
Clifton Royston <cliftonr at lava dot net>
Thu, 31 May 2001 19:21:44 -1000
44. Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Michael Smith <msmith at datafoundry dot net>
Fri, 1 Jun 2001 08:30:41 -0500
45. Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Michael Smith <msmith at datafoundry dot net>
Fri, 1 Jun 2001 09:34:37 -0500
46. Re: servermode
"Kenneth Porter" <shiva at well dot com>
Fri, 01 Jun 2001 10:06:22 -0700
47. Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Clifton Royston <cliftonr at lava dot net>
Fri, 1 Jun 2001 07:29:18 -1000
48. qpopper and MD5
Quaylar <cherok at innocent dot com>
Fri, 01 Jun 2001 20:01:40 +0200
49. Re: qpopper and MD5
Mauritz Antunes <mauritz at americasnet.com dot br>
Fri, 01 Jun 2001 15:35:40 -0300
50. Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run
Randall Gellens <randy at qualcomm dot com>
Fri, 1 Jun 2001 18:45:32 -0700
Date: Tue, 29 May 2001 18:09:44 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: user can not get messages
At 1:03 PM +0200 5/28/01, Joerg Hartmann wrote:
> Hallo ,
>
> some of my users on different linux-mailers have problems with
> qpopper (Version 3.1.2 and 4.0.1) from time to time.
> The Mailclient (Outlook or Netscape) stops downloading the mails
> from the spool and hangs until timeout. Not for all users, only
> one or two from some dozends.
If you can reproduce it, try enabling debug tracing. You may want
to add '#define TRACE_MSG_BODY 1' (without the quotes) as the first
line of config.h after running ./configure but before make.
>
> Sometimes this happens if the outlook of the user crashes,
> sometimes the mails works one day and stops the other.
> Most of the time i can put the user back to live with mail if i
> delete the very first message in his spoolfile. But the is NO
> good solution ...
> Dont know if the spool was coruppted - i can not see any problems
> in the spoolfile and mutt opens them without errors.
>
> In the server logs are I/O-Errors at the end of this sessions,
> but i dont understand what
> "operation not permitted" means to me :-( in this environment.
Usually it just means that the client shut down the connection, or
the connection was dropped.
>
> popper[9981]: Running in server mode; spool not changed; deleting
> temp drop [pop_updt.c:313]
> popper[9981]: +OK Pop server at mail.dus.mediadesign.de signing
> off. [popper.c:347]
> popper[9981]: I/O error flushing output to client golschew at
> dus-kiste [192.168.120.18]: Operation not permitted (1)
> [pop_send.c:685]
It looks like the connection is gone. The real problem is earlier.
> popper[9981]: (v4.0.2) Ending request from "golschew" at
> (dus-kiste) 192.168.120.18 [popper.c:365]
>
> And a second question:
>
> popper[9991]: HDR (len=54; hangup=0; errno=2) *** X-Mailer:
> Microsoft Internet E-Mail/MAPI - 8.0.0.4 [pop_send.c:432]
> popper[9991]: HDR (len=18; hangup=0; errno=2) *** MIME-Version:
> 1.0 [pop_send.c:432]
> popper[9991]: HDR (len=47; hangup=0; errno=2) *** Content-Type:
> text/plain; charset="iso-8859-1" [pop_send.c:432]
> popper[9991]: HDR (len=32; hangup=0; errno=2) ***
> Content-Transfer-Encoding: 8bit [pop_send.c:432]
> popper[9991]: HDR (len•; hangup=0; errno=2) ***
> X-MIME-Autoconverted: from quoted-printable to 8bi
> [pop_send.c:432]
>
> There is alway errno=2 at the header lines. What kind of error ist this
?
> Can someone please point me to a documentation where i can learn
> about this ?
error 2 is "no file" (ENOENT). It might be just left-over junk in
errno, since Qpopper didn't receive a SIGPIPE. It's in the debug
trace because there were some platforms that seemed to not send a
signal when the client disconnected.
> Ù@ù=01
> Thanks for any help ...
> Joerg
> --
> Joerg Hartmann
> mediadesign akademie
> Phone +49 340 253 2023 Fax +49 340 253 2010
> J.Hartmann at des.mediadesign dot de
Date: Tue, 29 May 2001 18:13:15 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: compiling problems
At 4:06 PM -0500 5/28/01, Eduardo A. Alcocer Rosado wrote:
> Sorry for my bad english..
>
> I´m trying to install qpopper4.0.2 in Linux 6.2 but I´m having proble
ms
> with some libraries, I have 4 days ago trying to resolv it.
>
> I executed the file "./configure", when I check the file config.cache I s
aw
> that no found some libraries and the config.log tell me that "Failed prog
ram
> was: " and show me some code lines, the numbers are:
> 3042, 3394, 3433, 3507, 3549, 3589, 3669, 3712, 3752, 3796, 4855
> so I check that numbers in the "configure" file and saw the libraries wic
h
> didn´t find. So I did a "find / -name <librarie.h> -print" and some
> libraries
> are in my server but not all of them. maybe are the enviroment variables?
>
> when I use make, it generated the popper file and I have configured the
> inetd.conf
> file, the services file too but I never can did a telnet at the port 110.
>
> I don´t know what to do.
>
>
> the archive config.cache was :
>
> ac_cv_func_pw_encrypt=${ac_cv_func_pw_encrypt='no'}
> ac_cv_func_set_auth_parameters=${ac_cv_func_set_auth_parameters='no'
}
> ac_cv_func_setproctitle=${ac_cv_func_setproctitle='no'}
> ac_cv_header_sys_netinet_in_h=${ac_cv_header_sys_netinet_in_h='no'}
> ac_cv_header_sys_security_h=${ac_cv_header_sys_security_h='no'}
> ac_cv_lib_dir_opendir=${ac_cv_lib_dir_opendir='no'}
> ac_cv_lib_krb_krb_recvauth=${ac_cv_lib_krb_krb_recvauth='no'}
> ac_cv_lib_mail_maillock=${ac_cv_lib_mail_maillock='no'}
> ac_cv_lib_nsl_t_accept=${ac_cv_lib_nsl_t_accept='no'}
> ac_cv_lib_posix4_clock_gettime=${ac_cv_lib_posix4_clock_gettime='no'
}
>
> ac_cv_lib_security_set_auth_parameters=${ac_cv_lib_security_set_auth_pa
ramet
> ers='no'}
> ac_cv_lib_socket_socket=${ac_cv_lib_socket_socket='no'}
> ac_cv_prog_cc_cross=${ac_cv_prog_cc_cross='no'}
>
>
>
> Thanx on advance
> Eduardo Alcocer
Does ./configure itself report any errors? How about make?
What happens when you execute 'popper/popper -v' ?
Date: Tue, 29 May 2001 22:26:54 -0300
From: applein <applein at tutopia.com dot br>
Subject: Re: qpopper.config
yes thankyou...
At 11:01 29/05/01 -1000, Clifton Royston wrote:
>On Mon, May 28, 2001 at 06:28:39PM -0300, applein wrote:
> > I'm trying use qpopper.config file for all my users how to make it?
>
>Are you asking how to make popper use it, or what should go in it?
>
>If you want one file to apply to all the users, put -f and the name of
>the file on the qpopper command line (in inetd.conf) like this:
>
> popper -f /usr/local/etc/qpopper.config
>
>If you want each user to have their own separate options file in the
>mail spool directory, put -U on the command line like this:
>
> popper -U
>
>If you want each user to have their own separate options file in their
>own home directory, put -u on the command line like this:
>
> popper -u
>
>If you want to know what should go in the file, there is no shortcut
>there, you need to read the administrators manual enough to understand
>what the options do.
>
> -- Clifton
>
>--
> Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
> WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Tue, 29 May 2001 18:20:06 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: qpopper.config
At 11:01 AM -1000 5/29/01, Clifton Royston wrote:
> If you want to know what should go in the file, there is no shortcut
> there, you need to read the administrators manual enough to understand
> what the options do.
There is a sample config file in the samples directory that has a
short description and example for each option.
Date: Tue, 29 May 2001 18:20:48 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: qpopper.config
At 11:01 AM -1000 5/29/01, Clifton Royston wrote:
> If you want each user to have their own separate options file in the
> mail spool directory, put -U on the command line like this:
>
> popper -U
It's also a good idea to make sure the config file in the spool is
not writeable by users.
From: "Eduardo A. Alcocer Rosado" <ealcocer at hotmail dot com>
Subject: RE: compiling problems
Date: Wed, 30 May 2001 10:27:24 -0500
----- Original Message -----
From: Randall Gellens <randy at qualcomm dot com>
To: Eduardo A. Alcocer Rosado <ealcocer at hotmail dot com>; Subscribers of Qpopper
<qpopper at lists.pensive dot org>
Sent: Tuesday, May 29, 2001 8:13 PM
Subject: Re: compiling problems
At 4:06 PM -0500 5/28/01, Eduardo A. Alcocer Rosado wrote:
> Sorry for my bad english..
>
> I´m trying to install qpopper4.0.2 in Linux 6.2 but I´m having problems
> with some libraries, I have 4 days ago trying to resolv it.
>
> I executed the file "./configure", when I check the file config.cache I
saw
> that no found some libraries and the config.log tell me that "Failed
program
> was: " and show me some code lines, the numbers are:
> 3042, 3394, 3433, 3507, 3549, 3589, 3669, 3712, 3752, 3796, 4855
> so I check that numbers in the "configure" file and saw the libraries
wich
> didn´t find. So I did a "find / -name <librarie.h> -print" and some
> libraries
> are in my server but not all of them. maybe are the enviroment variables?
>
> when I use make, it generated the popper file and I have configured the
> inetd.conf
> file, the services file too but I never can did a telnet at the port 110.
>
> I don´t know what to do.
>
>
> the archive config.cache was :
>
> ac_cv_func_pw_encrypt=${ac_cv_func_pw_encrypt='no'}
> ac_cv_func_set_auth_parameters=${ac_cv_func_set_auth_parameters='no'}
> ac_cv_func_setproctitle=${ac_cv_func_setproctitle='no'}
> ac_cv_header_sys_netinet_in_h=${ac_cv_header_sys_netinet_in_h='no'}
> ac_cv_header_sys_security_h=${ac_cv_header_sys_security_h='no'}
> ac_cv_lib_dir_opendir=${ac_cv_lib_dir_opendir='no'}
> ac_cv_lib_krb_krb_recvauth=${ac_cv_lib_krb_krb_recvauth='no'}
> ac_cv_lib_mail_maillock=${ac_cv_lib_mail_maillock='no'}
> ac_cv_lib_nsl_t_accept=${ac_cv_lib_nsl_t_accept='no'}
> ac_cv_lib_posix4_clock_gettime=${ac_cv_lib_posix4_clock_gettime='no'}
>
>
ac_cv_lib_security_set_auth_parameters=${ac_cv_lib_security_set_auth_paramet
> ers='no'}
> ac_cv_lib_socket_socket=${ac_cv_lib_socket_socket='no'}
> ac_cv_prog_cc_cross=${ac_cv_prog_cc_cross='no'}
>
>
>
> Thanx on advance
> Eduardo Alcocer
Does ./configure itself report any errors? How about make?
What happens when you execute 'popper/popper -v' ?
----------------------------------------------------------------------------
--------
When I execute "./configure --enable-servermode" I didn´t see any errors
and no one when I execute "make" and "make install", my problem started
when I never could did a "telnet localhost 110" then I check the files
"config.cache"
and "config.log" and could see that not found some libraries and the message
"Failed program was:"
The popper is in the directory:
/usr/local/sbin
The "inetd.conf" file have the line:
pop3 stream tcp nowait root /usr/local/sbin/popper -s
the "services" file have the next line
pop3 110/tcp pop-3
pop3 110/udp pop-3
when I execute popper -v the result it´s
Qpopper version 4.0.2 (non-standalone)
From: rick pim <rick at post.queensu dot ca>
Date: Wed, 30 May 2001 13:44:13 -0400
Subject: 4.0.2 and qpopper.org
i had a couple of questions regarding options on 4.0.2; my first
stop was the FAQ at www.qpopper.org. from where i'm sitting, though, my
DNS says there's no such host as www.qpopper.org; i've checked a couple
of other servers including some at qualcomm.com; there seems to be
something seriously dysfunctional with the qpopper.org domain.
which makes it hard to find the current version of the FAQ. so, question
1 is... does anyone know what's up with qpopper.org?
in addition, here are the questions i was going to look up in the
FAQ....
4.x has a variety of performance improvements over v3. i'd like to
implement as many of them as are safe in our situation. on our
systems, users have shell accounts. "most" users who use POP don't use
the shell access at all, let alone for mail. of those that do, "most"
don't use shell access and POP at the same time. our biggest system
has 15-20k users and about 100k pop connections per day.
the most obvious performance wins are server mode and fast-update.
fast-update is listed in the manual as potentially breaking biff.
if this is the worst problem then, given our setup, i'm more than willing
to enable it. are there any other consequences to using fast-update?
the same holds for server mode: in a sitation like this, there are
potential issues with server mode, but the documentation doesn't
detail them. exactly how serious _are_ they? what's the worst case?
is it something serious (lost mail, vanishing mailboxes) or just
cosmetic?
other performance wins in v4 would be nice to hear comments on.
rick pim
queen's university
From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 30 May 2001 11:06:21 -0700
Subject: Re: 4.0.2 and qpopper.org
On Wed, 30 May 2001 13:44:13 -0400, rick pim wrote:
>does anyone know what's up with qpopper.org?
Looks like both authoritative servers (noc.cerf.net and
signals.qualcomm.com) have only the SOA, no A records. Did somebody at
Qualcomm step on the zone file?
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Wed, 30 May 2001 09:09:36 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: 4.0.2 and qpopper.org
On Wed, May 30, 2001 at 01:44:13PM -0400, rick pim wrote:
> 4.x has a variety of performance improvements over v3. i'd like to
> implement as many of them as are safe in our situation. on our
> systems, users have shell accounts. "most" users who use POP don't use
> the shell access at all, let alone for mail. of those that do, "most"
> don't use shell access and POP at the same time. our biggest system
> has 15-20k users and about 100k pop connections per day.
This sounds quite similar to our configuration that I just posted
about. In our case, just implemented, v4 + server-mode (selectively) +
fast-update was a tremendous performance increase.
> the most obvious performance wins are server mode and fast-update.
> fast-update is listed in the manual as potentially breaking biff.
> if this is the worst problem then, given our setup, i'm more than willing
> to enable it. are there any other consequences to using fast-update?
There are two gotchas here, which I got after a week or two of puzzling
through things.
1) fast-update *only* ever applies if you are using server mode. I had
to read the code to understand this; I couldn't find a note to that
effect in the documentation that I could see. (Read the comments at
the the header of pop_updt.c, and then grep for the fast update
variable if you want to confirm this.) So first worry about making
server mode safe to use, and if you do then you will pretty certainly
find fast-update safe.
2) fast-update requires the poptemp (pop drop) files to be located on
the same partition as the corresponding mail spool files. If you have
previously located them on a separate partition (as we had) for greater
performance copying mailboxes to the poptemp files in non-server mode,
you will need to reorganize the location of your poptemp directory; in
our case because /var/mail is its own partition, we created a separate
directory under /var/mail for poptemp files. Again, I had to read the
code to get clear on this. Server mode still will recopy the spool
file under some circumstances to merge changes made by the pop session
with independent changes during it, e.g. new mail arriving. In
fast-update mode, it then relinks the recopied file on place of the
spool instead of copying it again.
I may try to write some proposed verbiage about both these points for
the documentation because it really confused me when I was trying to
set it up.
> the same holds for server mode: in a sitation like this, there are
> potential issues with server mode, but the documentation doesn't
> detail them. exactly how serious _are_ they? what's the worst case?
> is it something serious (lost mail, vanishing mailboxes) or just
> cosmetic?
Server mode is the biggest win, because it prevents qpopper from
recopying the *entire* mailbox on every single POP session.
In *theory* and in the worst case, I think that in server mode lost
mail could result in some combination of circumstances, like a user
reading mail with a carelessly implemented shell mail client, plus
using POP at the same time, plus mail arrives during the POP session.
I haven't read a definitive statement about this, and I might be overly
pessimistic, but popper is written to be extremely conservative about
these possibilities in non server mode. In server mode it is still
careful about its spool handling but less conservative in its
assumptions, basically assuming that the only way the spool will get
updated while popping is by new mail arriving.
I think your best course is to find some way to segregate users who may
actually *use* their shell from those who are certain not to log in and
run shell programs, and automatically enable server mode for all of the
latter. That's what we did and as of day 2 it's going very well. One
of v4's big advantages is that it has several facilities to do this,
based on the group a user is in or based on individual qpopper.options
files. Then if you have server-mode applying only to non-shell users,
fast-update is also safe for all of them. If you can put all your
shell users in certain groups, or all non-shell users in certain
groups, you're set. I ended up coding our own based on our
circumstances, where we set it based on the assigned login shell - if
they have a dummy shell of /usr/local/bin/no_shell or /sbin/nologin,
qpopper goes into server mode.
> other performance wins in v4 would be nice to hear comments on.
In combination with the above features, the UIDL cache file is a huge
win. As long as no new mail has come in for a given user, they can POP
it every 2 minutes with absolutely 0 performance impact, even if they
have a huge mailbox, because all qpopper needs to do is check the time
stamp on the files and then read the (tiny) UIDL cache file.
Same as with v3, turning off reverse lookups is a big win as always for
most servers.
If you have 15-20K users, if you can get other mail programs to comply
with it (clients, etc.) then you might consider the mailhash algorithms
to cut down on directory lookup times. This is minor compared to the
other improvements, though.
One last meta-issue is that if you write some scripts to analyse your
POP logs, you will probably find that, unless you have very strict mail
quotas, a dozen or so users out of your 15K are generating most of the
load on your mail server through having big mailboxes, leaving their
mail on the server, and checking them frequently. If you deal with
them administratively, you can significantly reduce your load. Log the
"Stats" and "Timing" lines, total the fields by user, and look for
users whose numbers stand out.
Good luck!
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 30 May 2001 12:25:36 -0700
Subject: Re: 4.0.2 and qpopper.org
On Wed, 30 May 2001 09:09:36 -1000, Clifton Royston wrote:
>2) fast-update requires the poptemp (pop drop) files to be located on
>the same partition as the corresponding mail spool files.
This conflicts with another motivation for using a different partition
for the temp drop: quotas. When a user gets above half his quota, he
can't POP anymore because the copy uses up more than his quota, so
administrative intervention is required. Putting the temp drop on a
filesystem with no quota allows a user near quota to reduce the size of
his mailbox.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Wed, 30 May 2001 09:26:13 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: compiling problems
On Wed, May 30, 2001 at 10:27:24AM -0500, Eduardo A. Alcocer Rosado wrote:
> ----- Original Message -----
> From: Randall Gellens <randy at qualcomm dot com>
> Does ./configure itself report any errors? How about make?
>
> What happens when you execute 'popper/popper -v' ?
> ----------------------------------------------------------------------------
> When I execute "./configure --enable-servermode" I didn´t see any
> errors and no one when I execute "make" and "make install", my
> problem started when I never could did a "telnet localhost 110" then
> I check the files "config.cache" and "config.log" and could see that
> not found some libraries and the message
> "Failed program was:"
A suggestion: try doing this again, but this time run "make realclean"
first or manually remove the config.cache file. (I suspect configure
didn't completely run all the steps because it relied on the
config.cache data.)
Then run "./configure --enable-servermode" again and see if there is
any change in what it reports.
> The popper is in the directory:
> /usr/local/sbin
> The "inetd.conf" file have the line:
> pop3 stream tcp nowait root /usr/local/sbin/popper -s
> the "services" file have the next line
> pop3 110/tcp pop-3
> pop3 110/udp pop-3
That part all looks good.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Wed, 30 May 2001 12:33:38 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: RE: compiling problems
At 10:27 AM -0500 5/30/01, Eduardo A. Alcocer Rosado wrote:
> When I execute "./configure --enable-servermode" I didn´t see any erro
rs
> and no one when I execute "make" and "make install"
Then it seems everything compiled just fine.
> , my problem started
> when I never could did a "telnet localhost 110"
This indicates a problem in the installation. See the
Administrator's Guide for step-by-step installation instructions
and also trouble-shooting steps. Doing a 'make install' may not
always work, especially for a first-time install. The
Administrator's Guide has the specific steps to do it manually.
> then I check the files
> "config.cache"
> and "config.log" and could see that not found some libraries and the mess
age
> "Failed program was:"
That's normal. Configure checks for a lot of stuff you may not
have on your system. If it doesn't report any problems, there
probably weren't any.
>
> The popper is in the directory:
> /usr/local/sbin
> The "inetd.conf" file have the line:
> pop3 stream tcp nowait root /usr/local/sbin/popper
-s
This should probably be
pop3 stream tcp nowait root
/usr/local/sbin/popper Qpopper -s
Again, see the Administrator's Guide for details.
> the "services" file have the next line
> pop3 110/tcp pop-3
> pop3 110/udp pop-3
>
>
> when I execute popper -v the result it´s
> Qpopper version 4.0.2 (non-standalone)
Then it seems to have compiled fine.
Date: Wed, 30 May 2001 12:27:42 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: 4.0.2 and qpopper.org
At 1:44 PM -0400 5/30/01, rick pim wrote:
> the most obvious performance wins are server mode and fast-update.
> fast-update is listed in the manual as potentially breaking biff.
> if this is the worst problem then, given our setup, i'm more than willing
> to enable it. are there any other consequences to using fast-update?
Shouldn't be any (other than the shell's "you have new mail"
feature) unless you have programs that "know" the i-node of the
spool file.
>
> the same holds for server mode: in a sitation like this, there are
> potential issues with server mode, but the documentation doesn't
> detail them. exactly how serious _are_ they? what's the worst case?
> is it something serious (lost mail, vanishing mailboxes) or just
> cosmetic?
Worst case is spool corruption. This could occur if the shell user
is messing with the spool file during a POP session. Just to be
clear: shell access itself isn't a problem. It's mentioned as a
potential contraindication for server mode because it provides the
opportunity for the user to muck with the spool directly. Even
altering the spool directly isn't necessarily a problem, but if
done during a POP session in server mode, you've got corruption.
>
> other performance wins in v4 would be nice to hear comments on.
Server mode is a *lot* faster during initial mail checks if no new
mail has arrived since the last mail check.
Chunky-writes may be faster or slower, depending on your network
(if it's congested, chunky-writes may be slower).
From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 30 May 2001 13:59:21 -0700
Subject: Re: 4.0.2 and qpopper.org
On Wed, 30 May 2001 10:41:32 -1000, Clifton Royston wrote:
>> >2) fast-update requires the poptemp (pop drop) files to be located on
>> >the same partition as the corresponding mail spool files.
>>
>> This conflicts with another motivation for using a different partition
>> for the temp drop: quotas. When a user gets above half his quota, he
>> can't POP anymore because the copy uses up more than his quota, so
>> administrative intervention is required. Putting the temp drop on a
>> filesystem with no quota allows a user near quota to reduce the size of
>> his mailbox.
>
>It's a good point, but it conflicts at a very fundamental level with
>the whole nature of the fast-update optimization.
I wonder how hard it would be to make this dynamic? For example, use
fast-update only if the mailbox is below half-quota.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Wed, 30 May 2001 10:41:32 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: 4.0.2 and qpopper.org
On Wed, May 30, 2001 at 12:25:36PM -0700, Kenneth Porter wrote:
> On Wed, 30 May 2001 09:09:36 -1000, Clifton Royston wrote:
>
> >2) fast-update requires the poptemp (pop drop) files to be located on
> >the same partition as the corresponding mail spool files.
>
> This conflicts with another motivation for using a different partition
> for the temp drop: quotas. When a user gets above half his quota, he
> can't POP anymore because the copy uses up more than his quota, so
> administrative intervention is required. Putting the temp drop on a
> filesystem with no quota allows a user near quota to reduce the size of
> his mailbox.
It's a good point, but it conflicts at a very fundamental level with
the whole nature of the fast-update optimization.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Wed, 30 May 2001 11:14:37 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: 4.0.2 and qpopper.org
On Wed, May 30, 2001 at 09:09:36AM -1000, Clifton Royston wrote:
> In *theory* and in the worst case, I think that in server mode lost
> mail could result in some combination of circumstances, like a user
> reading mail with a carelessly implemented shell mail client, plus
> using POP at the same time, plus mail arrives during the POP session.
Ugh.
I just got confirmation of this; it's no theory. One of our tech
support people was using sudo + pine to try to fix a user's spool file,
to try to help them get rid of a bad attachment they couldn't download,
the user POPped their mail, new mail came in, pine resynced, and *pow*
they ended up with no spool file and a corrupted temporary file. We'll
have to lay out some new procedures for support to use to avoid this; I
just hadn't thought of this situation.
I hate pine.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
From: "Eduardo A. Alcocer Rosado" <ealcocer at hotmail dot com>
Subject: RE: compiling problems
Date: Wed, 30 May 2001 17:19:44 -0500
thanx! It work it.
the problem was the parameter "s" it must be "S"
maybe I never should see the files config.cache and config.log
I did a big problem..
Thanx folks.
----- Original Message -----
From: Randall Gellens <randy at qualcomm dot com>
To: Eduardo A. Alcocer Rosado <ealcocer at hotmail dot com>; Subscribers of Qpopper
<qpopper at lists.pensive dot org>; Randall Gellens <randy at qualcomm dot com>
Sent: Wednesday, May 30, 2001 2:33 PM
Subject: RE: compiling problems
At 10:27 AM -0500 5/30/01, Eduardo A. Alcocer Rosado wrote:
> When I execute "./configure --enable-servermode" I didn´t see any errors
> and no one when I execute "make" and "make install"
Then it seems everything compiled just fine.
> , my problem started
> when I never could did a "telnet localhost 110"
This indicates a problem in the installation. See the
Administrator's Guide for step-by-step installation instructions
and also trouble-shooting steps. Doing a 'make install' may not
always work, especially for a first-time install. The
Administrator's Guide has the specific steps to do it manually.
> then I check the files
> "config.cache"
> and "config.log" and could see that not found some libraries and the
message
> "Failed program was:"
That's normal. Configure checks for a lot of stuff you may not
have on your system. If it doesn't report any problems, there
probably weren't any.
>
> The popper is in the directory:
> /usr/local/sbin
> The "inetd.conf" file have the line:
> pop3 stream tcp nowait root
/usr/local/sbin/popper -s
This should probably be
pop3 stream tcp nowait root
/usr/local/sbin/popper Qpopper -s
Again, see the Administrator's Guide for details.
> the "services" file have the next line
> pop3 110/tcp pop-3
> pop3 110/udp pop-3
>
>
> when I execute popper -v the result it´s
> Qpopper version 4.0.2 (non-standalone)
Then it seems to have compiled fine.
Date: Wed, 30 May 2001 15:23:13 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: RE: compiling problems
At 5:19 PM -0500 5/30/01, Eduardo A. Alcocer Rosado wrote:
> thanx! It work it.
> the problem was the parameter "s" it must be "S"
From the inetd.conf line you used, the problem looked to be that
you didn't pass the program name ("Qpopper" or "popper") as the
first parameter. If you still aren't passing it, it probably is
taking the first flag as the name (and thus not doing what you
want). See the Administrator's Guide for details.
Date: Wed, 30 May 2001 15:36:19 -0700 (PDT)
From: David Elkins <elkinsd at hurrah dot com>
Subject: re: servermode
Regarding the whole servermode vs sudo shell access to mailboxes, could
one use --enable-nonauth-file to temp. disable POP access to the mailboxes
and thus prevent data loss?
I didn't dive into the code to verify, but last I remember that was
checked before the dropcopy was made ..
David
Date: Wed, 30 May 2001 13:32:19 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: servermode
On Wed, May 30, 2001 at 03:36:19PM -0700, David Elkins wrote:
> Regarding the whole servermode vs sudo shell access to mailboxes, could
> one use --enable-nonauth-file to temp. disable POP access to the mailboxes
> and thus prevent data loss?
>
> I didn't dive into the code to verify, but last I remember that was
> checked before the dropcopy was made ..
Absolutely, and that's what I just instituted here as our new
procedure for support. (I just wrote a couple scripts our support guys
can use to easily add or remove usernames in that file.) It's still no
reason to go back to 3.x, just a little extra human attention required
for what should be a rare case anyway.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Wed, 30 May 2001 14:15:20 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Another question with server mode
Does UW imapd represent a risk to qpopper server mode?
I.e. if some user is accessing their mail via IMAP from one client,
and another mail client (e.g. on a different computer, set up for
automatic mail check) tries to POP the same mailbox, is this likely to
result in spool corruption?
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Wed, 30 May 2001 19:13:05 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: 4.0.2 and qpopper.org
One thing I *always* do before mucking with some user's mail spool is
to lock the spool with a
'touch /var/mail/<user>.lock;chmod 0 /var/mail/<user>.lock"
or
"touch /var/spool/mail/<user>.lock; chmod 0 /var/spool/mail/<user>.lock"
Is this a *true* lock? Well, there are no semaphores set, but for
programs that check for the existence of the file (sendmail, popper,
and imapd) it performs the same function.
On all the systems (SVR4 and above) that I've mucked with this seems to
stop sendmail in it's tracks, stops Eudora users and popper, as well as
mailx, openwin/bin/mailtool and /usr/dt/bin/dtmail... I imagine that
it would also stop MS Outlook since it relies on popper...
Be advised, however, that after you set the lock file, you have about 6
minutes to clear it or it gets cleared automatically.
Just my $0.02 worth...
Regards,
Gregory Hicks
> Date: Wed, 30 May 2001 11:14:37 -1000
> From: Clifton Royston <cliftonr at lava dot net>
>
> On Wed, May 30, 2001 at 09:09:36AM -1000, Clifton Royston wrote:
> > In *theory* and in the worst case, I think that in server mode lost
> > mail could result in some combination of circumstances, like a user
> > reading mail with a carelessly implemented shell mail client, plus
> > using POP at the same time, plus mail arrives during the POP session.
>
> Ugh.
>
> I just got confirmation of this; it's no theory. One of our tech
> support people was using sudo + pine to try to fix a user's spool file,
> to try to help them get rid of a bad attachment they couldn't download,
> the user POPped their mail, new mail came in, pine resynced, and *pow*
> they ended up with no spool file and a corrupted temporary file. We'll
> have to lay out some new procedures for support to use to avoid this; I
> just hadn't thought of this situation.
>
> I hate pine.
>
> -- Clifton
>
> --
> Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
> WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
---------------------------------------------------------------------
Gregory Hicks | Principal Systems Engineer
Cadence Design Systems | Direct: 408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3479
San Jose, CA 95134 | Internet: ghicks at cadence dot com
From: "Matt Garretson" <mattg at assembly.state.ny dot us>
Subject: Re: 4.0.2 and qpopper.org
Date: Thu, 31 May 2001 10:40:29 -0400
> I wonder how hard it would be to make this dynamic? For example, use
> fast-update only if the mailbox is below half-quota.
I was also wondering about enforcing quotas in the MDA
(e.g. procmail rules) without OS quotas enabled. Then Qpopper
fast-updates would be possible. (But might not the overhead
of the MDA keeping track of disk usage cancel out the benefits
of fast-update?)
-Matt
Date: Thu, 31 May 2001 17:40:51 +0300
From: "geocad" <geocad at qualitynet dot net>
Subject: download mail from many mailboxes using qpopper ?
Hi,
I am looking for a POP3/SMTP server which can download emails from
different pop3 mailboxes and allocate them to different users on the system
(I'm using FreeBsd 4.0). Something like Fetchmail from the ports
collection. Previously I was using Internet Anywhere Email Server for
Windows and this is exactly what I want but for my freebsd system. Can
anyone recomment me any software or tell me if QPopper can do these things ??
Regs,
Subject: Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
Date: Thu, 31 May 2001 17:30:56 +0200 (MET DST)
From: Eric Luyten <Eric.Luyten at vub.ac dot be>
> > I have seen that the problem is that Qpopper 4.0.2 ignores the POP pass
> > command with empty string and waits for a new pass command, but Qpopper
> > 4.0.2 doesn't shows any warning message about this.
> If you enter the pass command followed by four blanks, it works correctly. Its
> some sort of bug in pop_parse.c in the special handling of the pass command for
> the special case of nothing after the pass command.
Exactly.
Unless you make 'pass' follow with five spaces (one separator and four
argument characters) Qpopper 4.0 will not return any response whatsoever.
Apart from the "-ERR POP timeout from..." after 'T' seconds, that is.
Weird, since pop_parse.c doesn't appear to have changed between 3.1 and 4.0
Eric.
Date: Thu, 31 May 2001 10:46:19 -0600
From: The Doctor <doctor at doctor.nl2k.ab dot ca>
Subject: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
I am attempting to run qpopper on both 110 and 995 using
username/password authentification.
Currently in my inetd.conf I have:
#
# Internet server configuration database
#
# BSDI inetd.conf,v 2.16 2000/08/07 17:01:12 jch Exp
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
#
# poppassd is very insecure, please read the man page before enabling
#poppassd stream tcp nowait root /usr/libexec/tcpd poppassd
#pop stream tcp nowait root /usr/libexec/tcpd popper -l 2 -f /etc/mail/pop/qpopper.config
pop stream tcp nowait root /usr/libexec/tcpd popper
pop3s stream tcp nowait root /usr/contrib/sbin/stunnel stunnel -l /usr/libexec/popper -- popper -s
imap stream tcp nowait root /usr/libexec/tcpd /usr/contrib/bin/imapd
imaps stream tcp nowait root /usr/contrib/sbin/stunnel stunnel -l /usr/contrib/bin/imapd imapd
Pointers needed.
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 May 2001 12:28:04 -0700
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, 31 May 2001 10:46:19 -0600, The Doctor wrote:
>I am attempting to run qpopper on both 110 and 995 using
>username/password authentification.
Qpopper 4 supports TLS (secure connection) natively, so you don't need
stunnel to wrap the port 995 copy.
BTW, Randall, did you get my bug report on the openssl_shutdown stuff?
It was getting called even when the session didn't use STLS, and
there's some other shutdown error code ("operating system error") when
used on the alternate port.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
From: "Christopher Crowley" <ccrowley at tulane dot edu>
Subject: Re: Outlook Express - - Qpopper - - Openssl
Date: Thu, 31 May 2001 14:42:55 -0500
Hi -
I didn't receive a response from this the first time I posted.
QPopper 4.0.2
configure options:
./configure --enable-log-login --enable-nonauth-file=/etc/nonauthfile --enab
le-server-mode \
--enable-standalone --with-openssl=/usr/local/ssl
If I execute:
popper 8110 -f /etc/mail/pop/qpopper-both.config -l 1
I can telnet localhost 8110 and I am greeted with:
+OK Qpopper (version 4.0.2) at majestic starting. This works OK.
But I cannot open the server port with a SSL client:
openssl s_client -showcerts -host hostname.edu -port 8110 -state
Error message:
CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:error in SSLv2/v3 read server hello A
20333:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol:s23_clnt.c:460:
- - - - - - - - - -
If I execute:
popper 8110 -f /etc/mail/pop/qpopper-both.config -l 2
I can connect via SSL.
- - - - - - - - - - - -
Why doesn't the -l 1 command line feature work? Am I using it incorrectly?
Do I need to identify the port 8110 as the TLS port in the config file?
Thank you for your assistance!
Christopher Crowley
Unix System Administrator
ccrowley at tulane dot edu
504.314.2535
----- Original Message -----
From: "Christopher Crowley" <ccrowley at tulane dot edu>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Tuesday, May 29, 2001 9:51 AM
Subject: Outlook Express - - Qpopper - - Openssl
> Anyone experienced this problem?
>
> I have Qpopper built with OpenSSL support.
>
> When using Qpopper configuration directive:
> set tls-support = alternate-port
>
> I am using a server cert and key (signed by Verisign) that was on the
server
> already for another use.
>
> I can connect to the server using the openssl s_client (see below for
> handshake transcript). I can not connect using Outlook Express.
>
> - - - - - - - - - - -
>
> When using Qpopper configuration directive:
> set tls-support = stls (which is supposed to allow plain and encrypted
> "negotiations on the standard (or any) port...")
>
> I can access using Outlook Express on the port I started qpopper on:
>
> /export/home/root/src/qpopper4*/popper/popper 8110 -f
> /etc/mail/pop/qpopper.config -l 1
>
>
>
>
>
>
>
Date: Thu, 31 May 2001 14:00:10 -0600
From: The Doctor <doctor at doctor.nl2k.ab dot ca>
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, May 31, 2001 at 12:28:04PM -0700, Kenneth Porter wrote:
>
> On Thu, 31 May 2001 10:46:19 -0600, The Doctor wrote:
>
> >I am attempting to run qpopper on both ports 110 and 995 using
> >username/password authentification.
>
> Qpopper 4 supports TLS (secure connection) natively, so you don't need
> stunnel to wrap the port 995 copy.
>
I will remove the one line, however I am still none the wiser.
I can get qpopper to work on 110, but what about 995?
> BTW, Randall, did you get my bug report on the openssl_shutdown stuff?
> It was getting called even when the session didn't use STLS, and
> there's some other shutdown error code ("operating system error") when
> used on the alternate port.
>
> Ken
> mailto:shiva at well dot com
> http://www.sewingwitch.com/ken/
> [If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
>
>
--
God Queen and Country Member - Liberal International
Never Satan President and Republic This is doctor at nl2k.ab.ca Ici doctor at nl2k dot ab dot ca
Society MUST be saved! Republics must dissolve. .mu is for Mauritius NOT for worldwide Music; Mauritius rise up againgt the invasion.
.mu c'est L'ile Maurice PAS Musique Internationale; Mauriciens dit non a l'invasion!
Date: Thu, 31 May 2001 10:16:01 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Change to [AUTH] error message for use of non-auth file?
In pop_pass.c, at the head of the file there's this:
/* This error message is vague on purpose to help improve
security at the inconvience of administrators and users */
char *ERRMSG_PW = "[AUTH] Password supplied for \"%s\" is incorrect.";
char *ERRMSG_ACEXP = "[AUTH] \"%s\": account expired.";
char *ERRMSG_PWEXP = "[AUTH] \"%s\": password expired.";
char *ERRMSG_AUTH = "[AUTH] \"%s\": access denied.";
Then, far down, there is:
...
/*
* Is the user not authorized to use POP?
*/
if ( p->nonauthfile != NULL && checknonauthfile ( p ) != 0 ) {
sleep ( SLEEP_SECONDS );
return ( pop_msg ( p, POP_FAILURE, HERE, ERRMSG_PW, p->user ) );
}
...
(and likewise for the case of authfile defined and user not in it.)
Should I be changing this routine to return ERRMSG_AUTH instead of
ERRMSG_PW for these two cases?
When I was testing I found this message a bit misleading even though I
knew what was going on; if I have to lock somebody's pop access, I
don't want them to start changing their password because they think
they mistyped it.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
From: "Christopher Crowley" <ccrowley at tulane dot edu>
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
Date: Thu, 31 May 2001 15:16:23 -0500
>
> BTW, Randall, did you get my bug report on the openssl_shutdown stuff?
> It was getting called even when the session didn't use STLS, and
> there's some other shutdown error code ("operating system error") when
> used on the alternate port.
I am seeing these errors also in my log when I access qpopper4.0.2 without
SSL:
May 31 15:11:42 [20700]: OpenSSL Error during shutdown
[pop_tls_openssl.c:790]
May 31 15:11:42 [20700]: ...SSL error: error:140E0114:SSL
routines:SSL_shutdown:uninitialized [pop_tls_openssl.c:790]
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 May 2001 13:47:21 -0700
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, 31 May 2001 14:00:10 -0600, The Doctor wrote:
>I will remove the one line, however I am still none the wiser.
>
>I can get qpopper to work on 110, but what about 995?
I don't understand what you're asking. Have you read the PDF file?
What, exactly, fails? What do your log files show? What steps are you
taking to test? The first step in solving a problem is clearly
identifying it.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Thu, 31 May 2001 23:55:48 +0300
From: Simon <geocad at qualitynet dot net>
Subject: download mail from many mailboxes using qpopper ?
Hi,
I am looking for a POP3/SMTP server which can download emails from
different pop3 mailboxes and allocate them to different users on the system
(I'm using FreeBsd 4.0). Something like Fetchmail from the ports
collection. Previously I was using Internet Anywhere Email Server for
Windows and this is exactly what I want but for my freebsd system. Can
anyone recomment me any software or tell me if QPopper can do these things ??
Regs,
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 May 2001 15:23:51 -0700
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, 31 May 2001 15:16:23 -0500, Christopher Crowley wrote:
>I am seeing these errors also in my log when I access qpopper4.0.2 without
>SSL:
>
>May 31 15:11:42 [20700]: OpenSSL Error during shutdown
>[pop_tls_openssl.c:790]
>May 31 15:11:42 [20700]: ...SSL error: error:140E0114:SSL
>routines:SSL_shutdown:uninitialized [pop_tls_openssl.c:790]
Yes, exactly what I was seeing. If the user fails to issue an STLS
command, then pop_tls_init is not called, but pop_tls_shutdown is
called on disconnect. Qpopper needs to call shutdown only if init was
previously called. Otherwise the TLS structure has garbage in it.
If pop_tls_init is called, I saw a different shutdown error about an OS
error, but I think that might be an issue in openssl.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 May 2001 15:25:46 -0700
Subject: Re: download mail from many mailboxes using qpopper ?
On Thu, 31 May 2001 23:55:48 +0300, Simon wrote:
>I am looking for a POP3/SMTP server which can download emails from
>different pop3 mailboxes and allocate them to different users on the system
>(I'm using FreeBsd 4.0). Something like Fetchmail from the ports
>collection.
Fetchmail is what you want. Qpopper doesn't do that. (I use fetchmail
on my site for a couple of ISP accounts, to avoid having to configure a
client to check those mailboxes when they should rarely get mail.)
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
From: "Queticon@verizon dot net" <res087jh at verizon dot net>
Subject: Unsbscribe
Date: Thu, 31 May 2001 18:38:51 -0400
This is a multi-part message in MIME format.
------=_NextPart_000_1800_01C0EA00.F02FFBF0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
unsubscribe
------=_NextPart_000_1800_01C0EA00.F02FFBF0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html;
charset=iso-8859-1">
<META content="MSHTML 5.50.4522.1800" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>unsubscribe</FONT></DIV></BODY></HTML>
------=_NextPart_000_1800_01C0EA00.F02FFBF0--
Date: Thu, 31 May 2001 12:50:54 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
On Thu, May 31, 2001 at 05:30:56PM +0200, Eric Luyten wrote:
> > > I have seen that the problem is that Qpopper 4.0.2 ignores the POP pass
> > > command with empty string and waits for a new pass command, but Qpopper
> > > 4.0.2 doesn't shows any warning message about this.
>
> > If you enter the pass command followed by four blanks, it works correctly. Its
> > some sort of bug in pop_parse.c in the special handling of the pass command for
> > the special case of nothing after the pass command.
...
> Unless you make 'pass' follow with five spaces (one separator and four
> argument characters) Qpopper 4.0 will not return any response whatsoever.
>
> Apart from the "-ERR POP timeout from..." after 'T' seconds, that is.
>
> Weird, since pop_parse.c doesn't appear to have changed between 3.1 and 4.0
I believe either the problem existed with 3.x (I haven't tested that)
or something must have changed in the context of the return code tests
in the sequence of calls from
popper => pop_get_command => pop_parse
The problem is that in the error case of no parameter being found to
the "pass" command (which is handled specially within the pop_parse
function), pop_parse returns a -1 (implying no command found) when it
should return 0 (indicating a command was found but with no parameter.)
This causes the main loop in popper.c to treat it as if an empty line
had been entered, and wait for a new line of input without returning a
-ERR response.
I believe one correct fix is:
*** pop_parse.c 2001/05/16 01:22:13 1.1
--- pop_parse.c 2001/05/31 22:48:40
***************
*** 109,115 ****
}
return ( 1 );
} else
! return ( -1 );
}
}
else {
--- 109,116 ----
}
return ( 1 );
} else
! /* 1 valid command was entered but no valid parameter */
! return ( 0 );
}
}
else {
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Thu, 31 May 2001 16:55:30 -0600
From: The Doctor <doctor at doctor.nl2k.ab dot ca>
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, May 31, 2001 at 03:16:23PM -0500, Christopher Crowley wrote:
>
> >
> > BTW, Randall, did you get my bug report on the openssl_shutdown stuff?
> > It was getting called even when the session didn't use STLS, and
> > there's some other shutdown error code ("operating system error") when
> > used on the alternate port.
>
> I am seeing these errors also in my log when I access qpopper4.0.2 without
> SSL:
>
> May 31 15:11:42 [20700]: OpenSSL Error during shutdown
> [pop_tls_openssl.c:790]
> May 31 15:11:42 [20700]: ...SSL error: error:140E0114:SSL
> routines:SSL_shutdown:uninitialized [pop_tls_openssl.c:790]
>
>
>
Why is this?
--
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 May 2001 16:56:40 -0700
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run on both ports 110 and 995
On Thu, 31 May 2001 16:55:30 -0600, The Doctor wrote:
>Why is this?
Qpopper should only call tls_shutdown if it's previously called
tls_init. tls_init is always called on port 995, but on 110 it's only
called if the client issued an STLS command, yet Qpopper calls
tls_shutdown unconditionally when closing the connection.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Thu, 31 May 2001 22:12:35 -0500 (CDT)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: 4.0.2 and qpopper.org
On Wed, 30 May 2001, Clifton Royston wrote:
> On Wed, May 30, 2001 at 09:09:36AM -1000, Clifton Royston wrote:
> > In *theory* and in the worst case, I think that in server mode lost
> > mail could result in some combination of circumstances, like a user
> > reading mail with a carelessly implemented shell mail client, plus
> > using POP at the same time, plus mail arrives during the POP session.
>
> Ugh.
>
> I just got confirmation of this; it's no theory. One of our tech
> support people was using sudo + pine to try to fix a user's spool file,
passwd -l is your friend.
AB
Date: Thu, 31 May 2001 17:18:15 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: 4.0.2 and qpopper.org
On Thu, May 31, 2001 at 10:12:35PM -0500, Alan Brown wrote:
> On Wed, 30 May 2001, Clifton Royston wrote:
>
> > On Wed, May 30, 2001 at 09:09:36AM -1000, Clifton Royston wrote:
> > > In *theory* and in the worst case, I think that in server mode lost
> > > mail could result in some combination of circumstances, like a user
> > > reading mail with a carelessly implemented shell mail client, plus
> > > using POP at the same time, plus mail arrives during the POP session.
> >
> > Ugh.
> >
> > I just got confirmation of this; it's no theory. One of our tech
> > support people was using sudo + pine to try to fix a user's spool file,
>
> passwd -l is your friend.
Actually configure --enable-nonauth-file is your friend - that way we
can lock them out of POP but not out of dialup.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Thu, 31 May 2001 23:33:47 -0500
From: Tim Olson <tolson at unionsemiconductor dot com>
Subject: Re: servermode
Ok, so a dumb question to the servermode thread....
Would using "cat" or "cp" (copy) on a spool file while someone
POP's in cause any problems? We have a couple of people who we
make scripts for that automatically back up their spool files
on a schedule, and sometimes we use cat to scan for keywords
in known virus emails. I wouldn't want to start enabling
servermode and then find out that cp or cat interfere.
Any idea if they do?
Thanks,
Tim Olson
Clifton Royston wrote:
>
> On Wed, May 30, 2001 at 03:36:19PM -0700, David Elkins wrote:
> > Regarding the whole servermode vs sudo shell access to mailboxes, could
> > one use --enable-nonauth-file to temp. disable POP access to the mailboxes
> > and thus prevent data loss?
> >
> > I didn't dive into the code to verify, but last I remember that was
> > checked before the dropcopy was made ..
>
> Absolutely, and that's what I just instituted here as our new
> procedure for support. (I just wrote a couple scripts our support guys
> can use to easily add or remove usernames in that file.) It's still no
> reason to go back to 3.x, just a little extra human attention required
> for what should be a rare case anyway.
>
> -- Clifton
>
> --
> Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
> WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Thu, 31 May 2001 19:21:44 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: servermode
On Thu, May 31, 2001 at 11:33:47PM -0500, Tim Olson wrote:
> Ok, so a dumb question to the servermode thread....
>
> Would using "cat" or "cp" (copy) on a spool file while someone
> POP's in cause any problems? We have a couple of people who we
> make scripts for that automatically back up their spool files
> on a schedule, and sometimes we use cat to scan for keywords
> in known virus emails. I wouldn't want to start enabling
> servermode and then find out that cp or cat interfere.
> Any idea if they do?
Oh, anything that doesn't *write* to the spool file should be just
fine. It's just having two processes decide to write it at the same
time that is bad, and that's why I'm concerned about imapd.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Fri, 1 Jun 2001 08:30:41 -0500
From: Michael Smith <msmith at datafoundry dot net>
Subject: Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
I just ran across this problem yesterday with an outlook customer
as well. Somewhere between 3.x and 4.x some logic changed
somewhere that is now behaving in a very broken manner, IMO.
Now, I'm not sure what the intended behavior is. Should it
a) return the too few arguments error? or
b) check the blank password against the users password and
return an incorrect password error?
I'm not sure which would be the correct behavior. I know how to
implement a) very easily. Haven't figured out b) yet. If qualcomm would
be so kind as to tell us which behavior is correct, I'll see about
whipping up a patch.
On Tue, May 29, 2001 at 03:36:10PM +0200, Eric Luyten wrote:
> We upgraded Qualcomm popper version 3.1.2 to 4.0.2 last Friday
> and had to help a number of Outlook Express users (other admins
> have already posted the same on this mailing list).
>
> In a number of cases (all ?) the situation could be normalised by
> entering the user password in the appropriate OE configuration panel.
>
> We found that a combination of empty password field and a checked
> "remember password" box makes the client exhibit different behaviour
> with Qpopper 4 server versus version 3.
>
> Small illustration :
>
> % telnet XXXX pop3
> Trying [SNIP]...
> Connected to XXXX.
> Escape character is '^]'.
> +OK QPOP (version 3.1.2) at XXXX starting.
> user joeuser<CR>
> +OK Password required for joeuser.
> pass<CR> [several seconds wait]
> -ERR [AUTH] Password supplied for "joeuser" is incorrect.
> +OK Pop server at XXXX signing off.
> Connection closed by foreign host.
>
> % telnet YYYY pop3
> Trying [SNIP]...
> Connected to YYYY.
> Escape character is '^]'.
> +OK Qpopper (version 4.0.2) at YYYY starting.
> user joeuser<CR>
> +OK Password required for joeuser.
> pass<CR> [several MINUTES wait]
> -ERR POP timeout from YYYY
> +OK Pop server at YYYY signing off.
> Connection closed by foreign host.
>
>
>
> Other data :
> both servers are Solaris 7, shadow password files
> Qpopper was compiled in server mode, no APOP or Kerberos, no TLS
> (de)selecting "chunky-writes" makes no difference
>
> Hope this helps,
> Eric Luyten, Computing Centre VUB/ULB.
>
> P.S. Moving from Qpopper 3 to 4 makes for half the CPU utilisation
> and 60% less I/O on the mail spool partitions.
> Great job, Randall et al.
--
Michael Smith ... We build e-business infrastructure solutions
SysAdmin, DataFoundry.net ... www.datafoundry.net
Date: Fri, 1 Jun 2001 09:34:37 -0500
From: Michael Smith <msmith at datafoundry dot net>
Subject: Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Attached is the patch for pop_parse.c to implement behavior a)
Already I'm seeing a ton of log messages now after implementing this
patch. However, we have over 40,000 mail users and so far I'm noticing
about 10 users with constant problems relating to the pass command.
What do you want to bet they all run Outlook or Outlook Express?
With this patch, 'pass' and 'pass ' will return the too few arguments
error. pass with two or more spaces will return the password error and
disconnect the session.
On Fri, Jun 01, 2001 at 08:30:41AM -0500, Michael Smith wrote:
> I just ran across this problem yesterday with an outlook customer
> as well. Somewhere between 3.x and 4.x some logic changed
> somewhere that is now behaving in a very broken manner, IMO.
>
> Now, I'm not sure what the intended behavior is. Should it
> a) return the too few arguments error? or
> b) check the blank password against the users password and
> return an incorrect password error?
>
>
> I'm not sure which would be the correct behavior. I know how to
> implement a) very easily. Haven't figured out b) yet. If qualcomm would
> be so kind as to tell us which behavior is correct, I'll see about
> whipping up a patch.
>
> On Tue, May 29, 2001 at 03:36:10PM +0200, Eric Luyten wrote:
> > We upgraded Qualcomm popper version 3.1.2 to 4.0.2 last Friday
> > and had to help a number of Outlook Express users (other admins
> > have already posted the same on this mailing list).
> >
> > In a number of cases (all ?) the situation could be normalised by
> > entering the user password in the appropriate OE configuration panel.
> >
> > We found that a combination of empty password field and a checked
> > "remember password" box makes the client exhibit different behaviour
> > with Qpopper 4 server versus version 3.
> >
> > Small illustration :
> >
> > % telnet XXXX pop3
> > Trying [SNIP]...
> > Connected to XXXX.
> > Escape character is '^]'.
> > +OK QPOP (version 3.1.2) at XXXX starting.
> > user joeuser<CR>
> > +OK Password required for joeuser.
> > pass<CR> [several seconds wait]
> > -ERR [AUTH] Password supplied for "joeuser" is incorrect.
> > +OK Pop server at XXXX signing off.
> > Connection closed by foreign host.
> >
> > % telnet YYYY pop3
> > Trying [SNIP]...
> > Connected to YYYY.
> > Escape character is '^]'.
> > +OK Qpopper (version 4.0.2) at YYYY starting.
> > user joeuser<CR>
> > +OK Password required for joeuser.
> > pass<CR> [several MINUTES wait]
> > -ERR POP timeout from YYYY
> > +OK Pop server at YYYY signing off.
> > Connection closed by foreign host.
> >
> >
> >
> > Other data :
> > both servers are Solaris 7, shadow password files
> > Qpopper was compiled in server mode, no APOP or Kerberos, no TLS
> > (de)selecting "chunky-writes" makes no difference
> >
> > Hope this helps,
> > Eric Luyten, Computing Centre VUB/ULB.
> >
> > P.S. Moving from Qpopper 3 to 4 makes for half the CPU utilisation
> > and 60% less I/O on the mail spool partitions.
> > Great job, Randall et al.
>
> --
> Michael Smith ... We build e-business infrastructure solutions
> SysAdmin, DataFoundry.net ... www.datafoundry.net
--
Michael Smith ... We build e-business infrastructure solutions
SysAdmin, DataFoundry.net ... www.datafoundry.net
--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="pop_parse.c.patch"
--+QahgC5+KEYLbs62--
From: "Kenneth Porter" <shiva at well dot com>
Date: Fri, 01 Jun 2001 10:06:22 -0700
Subject: Re: servermode
On Thu, 31 May 2001 23:33:47 -0500, Tim Olson wrote:
>We have a couple of people who we
>make scripts for that automatically back up their spool files
>on a schedule, and sometimes we use cat to scan for keywords
>in known virus emails.
If you use procmail as your delivery agent, you can use procmail
recipes to do that.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Fri, 1 Jun 2001 07:29:18 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Outlook Express troubles following Qpopper 3 -> 4 upgrade.
On Fri, Jun 01, 2001 at 08:30:41AM -0500, Michael Smith wrote:
> I just ran across this problem yesterday with an outlook customer
> as well. Somewhere between 3.x and 4.x some logic changed
> somewhere that is now behaving in a very broken manner, IMO.
This has been discussed pretty recently; I just sent in a patch too.
> Now, I'm not sure what the intended behavior is. Should it
> a) return the too few arguments error? or
I'm fairly sure that clients previously relied on it returning some
error, I believe the too few arguments error.
> b) check the blank password against the users password and
> return an incorrect password error?
>
>
> I'm not sure which would be the correct behavior. I know how to
> implement a) very easily. Haven't figured out b) yet. If qualcomm would
> be so kind as to tell us which behavior is correct, I'll see about
> whipping up a patch.
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Fri, 01 Jun 2001 20:01:40 +0200
From: Quaylar <cherok at innocent dot com>
Subject: qpopper and MD5
hi all
i am using the newest version of qpopper on my mandrake 7.2 system which is
using MD5 and shadow passwords.
i compiled qpopper with the --enable-specialauth option and still get a
"wrong password" message at authentication.
i am not using apop or pam but simple AUTH.
is there a special thing i have to do in order to get qpopper recognize the
passwords ?
thx for any help,
--quaylar
Date: Fri, 01 Jun 2001 15:35:40 -0300
From: Mauritz Antunes <mauritz at americasnet.com dot br>
Subject: Re: qpopper and MD5
Hi
I get the same problem..
I'm using qpopper+mysql and my passwords use MD5
Help us please :)
[]'s
Mauritz
At 15:01 01/06/2001, Quaylar wrote:
>hi all
>
>i am using the newest version of qpopper on my mandrake 7.2 system which
>is using MD5 and shadow passwords.
>i compiled qpopper with the --enable-specialauth option and still get a
>"wrong password" message at authentication.
>i am not using apop or pam but simple AUTH.
>
>is there a special thing i have to do in order to get qpopper recognize
>the passwords ?
>
>thx for any help,
>
>--quaylar
>
>
Date: Fri, 1 Jun 2001 18:45:32 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Running Qpopper on BSD/OS 4.2 and wanting qpopper to run
At 12:28 PM -0700 5/31/01, Kenneth Porter wrote:
> BTW, Randall, did you get my bug report on the openssl_shutdown stuff?
> It was getting called even when the session didn't use STLS, and
> there's some other shutdown error code ("operating system error") when
> used on the alternate port.
I put in a patch a while ago for that. It should show up in 4.0.3.
Last updated on 1 Jun 2001 by Pensive Mailing List Admin