The qpopper list archive ending on 5 Dec 2001


Topics covered in this issue include:

  1. Re: Mail gets downloaded again on changing server.
       Gregory Hicks <ghicks at cadence dot com>
       Mon, 26 Nov 2001 23:44:53 -0800 (PST)
  2. Possible overrun constructing bulldb path
       "Kenneth Porter" <shiva at well dot com>
       Tue, 27 Nov 2001 00:48:32 -0800
  3. qpopper refuses (or slow) connections on port 110
       Xavier <xavier at rootshell dot be>
       Tue, 27 Nov 2001 14:27:40 +0100 (CET)
  4. OpenSSL with qpopper 4.0.3
       Denny-Schierz <cuall at gmx dot de>
       Wed, 28 Nov 2001 12:35:27 +0100
  5. Re: OpenSSL with qpopper 4.0.3
       Denny-Schierz <cuall at gmx dot de>
       Wed, 28 Nov 2001 12:57:25 +0100
  6. Qpopper 4.0.4fc1 RPM available
       "Kenneth Porter" <shiva at well dot com>
       Wed, 28 Nov 2001 05:38:24 -0800
  7. modifying qpopper srpm
       "Peter Santiago" <petersantiago at bigfoot dot com>
       Wed, 28 Nov 2001 22:02:08 +0800
  8. Re: modifying qpopper srpm
       "Kenneth Porter" <shiva at well dot com>
       Wed, 28 Nov 2001 06:04:15 -0800
  9. Qpopper4.0.3 Solaris8 PAM /etc/pam.d/pop3
       COtto-Lange at vwd dot de
       Thu, 29 Nov 2001 11:09:24 +0100
 10. DoS attack against Qpopper using non-existent "aaaaaaaaa" user name
       Eric Luyten <Eric.Luyten at vub.ac dot be>
       Thu, 29 Nov 2001 15:35:27 +0100 (MET)
 11. forcing qpopper to compile using cc
       Christopher Scott <chrisjscott at mindspring dot com>
       Thu, 29 Nov 2001 17:00:22 -0500
 12. Re: forcing qpopper to compile using cc
       Michael Kjorling <michael at kjorling dot com>
       Thu, 29 Nov 2001 23:14:00 +0100 (CET)
 13. How does qpopper 4.0.3 deal with UIDL?
       Ted Hatfield <ted at prismnet dot com>
       Thu, 29 Nov 2001 19:29:27 -0600 (CST)
 14. Re: How does qpopper 4.0.3 deal with UIDL?
       Randall Gellens <randy at qualcomm dot com>
       Thu, 29 Nov 2001 18:57:33 -0800
 15. Re: How does qpopper 4.0.3 deal with UIDL?
       Ted Hatfield <ted at prismnet dot com>
       Thu, 29 Nov 2001 22:48:49 -0600 (CST)
 16. Re: How does qpopper 4.0.3 deal with UIDL? 
       Ted Cabeen <ted at impulse dot net>
       Fri, 30 Nov 2001 09:43:08 -0800
 17. Re: How does qpopper 4.0.3 deal with UIDL?
       Randall Gellens <randy at qualcomm dot com>
       Fri, 30 Nov 2001 10:40:04 -0800
 18. Proposed solution for qpopper + imapd problem
       Clifton Royston <cliftonr at lava dot net>
       Fri, 30 Nov 2001 08:56:37 -1000
 19. Re: How does qpopper 4.0.3 deal with UIDL?
       Ted Hatfield <ted at prismnet dot com>
       Fri, 30 Nov 2001 13:18:55 -0600 (CST)
 20. Re: Proposed solution for qpopper + imapd problem
       Clifton Royston <cliftonr at lava dot net>
       Fri, 30 Nov 2001 12:35:01 -1000
 21. Re: Proposed solution for qpopper + imapd problem
       Daniel Senie <dts at senie dot com>
       Fri, 30 Nov 2001 18:18:40 -0500
 22. Re: Proposed solution for qpopper + imapd problem
       Randall Gellens <randy at qualcomm dot com>
       Fri, 30 Nov 2001 15:48:18 -0800
 23. Re: How does qpopper 4.0.3 deal with UIDL?
       Randall Gellens <randy at qualcomm dot com>
       Fri, 30 Nov 2001 15:57:29 -0800
 24. Re: Proposed solution for qpopper + imapd problem
       Clifton Royston <cliftonr at lava dot net>
       Fri, 30 Nov 2001 14:15:31 -1000
 25. Re: Proposed solution for qpopper + imapd problem
       Randall Gellens <randy at qualcomm dot com>
       Fri, 30 Nov 2001 16:58:27 -0800
 26. Re: Proposed solution for qpopper + imapd problem
       Gregory Hicks <ghicks at cadence dot com>
       Fri, 30 Nov 2001 16:56:59 -0800 (PST)
 27. Qpopper with Outlook help needed
       "Shaun Bennett" <shaunbennett at sbconsultancy dot net>
       Sun, 2 Dec 2001 15:55:44 -0000
 28. Re: Qpopper with Outlook help needed
       Gregory Hicks <ghicks at cadence dot com>
       Sun, 2 Dec 2001 11:26:38 -0800 (PST)
 29. I cannot make SSL to work on Solaris 2.7 (long post)
       =?iso-8859-1?q?José Vicente Núñez Zuleta?= <josevnz at yahoo dot com>
       Sun, 2 Dec 2001 15:34:45 -0600 (CST)
 30. Qppoper and SSL on Solaris 7: Not working (setup steps provided)
       =?iso-8859-1?q?José Vicente Núñez Zuleta?= <josevnz at yahoo dot com>
       Sun, 2 Dec 2001 16:50:07 -0600 (CST)
 31. Outlook XP errors with qpopper 3.1
       Christina Plummer <chpr at mail.rochester dot edu>
       Mon, 3 Dec 2001 12:27:18 -0500
 32. Re: Qpopper with Outlook help needed 
       Ted Cabeen <ted at impulse dot net>
       Mon, 03 Dec 2001 09:50:51 -0800
 33. Re: Proposed solution for qpopper + imapd problem
       Robert Brewer <rbrewer at lava dot net>
       Mon, 03 Dec 2001 17:42:34 -1000
 34. [0] 2 (No such file or directory); client crashes when trying to 
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Tue, 04 Dec 2001 16:45:09 +0100
 35. Re: [0] 2 (No such file or directory); client crashes when trying to 
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Tue, 04 Dec 2001 16:51:07 +0100
 36. Re: Proposed solution for qpopper + imapd problem
       Randall Gellens <randy at qualcomm dot com>
       Tue, 4 Dec 2001 10:44:47 -0800
 37. Re: I cannot make SSL to work on Solaris 2.7 (long post)
       Randall Gellens <randy at qualcomm dot com>
       Tue, 4 Dec 2001 10:54:28 -0800
 38. Re: [0] 2 (No such file or directory); client crashes when
       Randall Gellens <randy at qualcomm dot com>
       Tue, 4 Dec 2001 11:11:47 -0800
 39. Re: [0] 2 (No such file or directory); client crashes when trying to download mail
       Clifton Royston <cliftonr at lava dot net>
       Tue, 4 Dec 2001 11:03:55 -1000
 40. Re: Proposed solution for qpopper + imapd problem
       Scott McDermott <mcdermot at questra dot com>
       Tue, 4 Dec 2001 23:02:42 -0500
 41. Re: Proposed solution for qpopper + imapd problem
       Robert Brewer <rbrewer at lava dot net>
       Tue, 04 Dec 2001 18:07:38 -1000
 42. Re: Proposed solution for qpopper + imapd problem
       Scott McDermott <mcdermot at questra dot com>
       Tue, 4 Dec 2001 23:29:56 -0500
 43. Re: Proposed solution for qpopper + imapd problem
       Scott McDermott <mcdermot at questra dot com>
       Wed, 5 Dec 2001 00:01:50 -0500
 44. Re: Proposed solution for qpopper + imapd problem
       Scott McDermott <mcdermot at questra dot com>
       Wed, 5 Dec 2001 00:00:38 -0500
 45. random truncation of messages received via ssl by outlook
       Scott McDermott <mcdermot at questra dot com>
       Wed, 5 Dec 2001 00:13:49 -0500
 46. Outlooks and qpopper
       "Maciej Uhlig" <muhlig at us.edu dot pl>
       Wed, 5 Dec 2001 08:35:33 +0100
 47. duplicate mails and slow mail
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Wed, 05 Dec 2001 11:41:09 +0100
 48. Re: duplicate mails and slow mail
       Oliver Egginger <Oliver.Egginger at dvz.fh-giessen dot de>
       Wed, 5 Dec 2001 12:07:13 +0000
 49. Re: duplicate mails and slow mail
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Wed, 05 Dec 2001 12:07:15 +0100
 50. outlook/entourage qpopper problem
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Wed, 05 Dec 2001 18:16:39 +0100

Date: Mon, 26 Nov 2001 23:44:53 -0800 (PST)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Mail gets downloaded again on changing server.

> Date: Tue, 27 Nov 2001 10:47:08 +0530
> From: Anil Shewale <anil.shewale at timesgroup dot com>
> 
> Dear All
>     We are using qpopper and Sendmail as POP3 and SMTP service. We are 
> in process of changing server. We have copied all mail boxes on new 
> server, but when users do pop for new messages entire mail box (New 
and 
> Old Mails) gets downloaded on users pc. Since volume of users and Mail

I am NOT an expert on Qpopper, but, as I recall, the downloading of
email is a function of the user MUA (Eudora, Netscape, Outlook, et
al...

If the version of popper is the same on the new host as the old host,
the X-UIDL should indicate to the NEW popper that the mail has already
been downloaded.  I think...

However, that having been said, when I change a user's email address
from one host to another (with different versions of qpopper), I take
care to move any remaining mail in the spool to the new host.  Some of
our users leave mail on the server (rather than deleting when
downloaded).  This does, in fact, cause the user in question to get
duplicate messages.

There are two fixes:

1) Have the user change their options so that mail is NOT left on the
server before changing hosts.  After the change, the user can re-set
the option to leave mail on the server but delete from the server when
the trash is emptied.

2) After the change of hosts, but before mail is checked on the new
host, the user can rename their 'inbox' (inbox.mbx (Eudora), INBOX
(Netscape), et al), restart their MUA, re-set any options they may have
had and then download the mail.  The newly downloaded mail will go to
the trash inbox.  The user can just delete this inbox (or selectively
merge messages into the 'old' Inbox) before deleting the 'new' inbox
and renaming the old to the new...

(I usually walk the user through the second version just to make sure
it goes OK...)

Just my own $0.02...

Regards,
Gregory Hicks

> Box is very high this will create problem for us. We keep messages on 
> server for webmail access, so users mail client (Netscape / Outlook 
> etc.) is configured to Leave messages on server.
> 
> 	Now how do i stop mails getting downloaded again whenever we 
change the server? 
> 
> This is very critical for us as because of server installation has 
stopped.  
> 
> 
> Thank You
> 
> Anil Shewale
> Times of India
> Technical Support Cell
> Times of India Building
> Dr. D. N. Road, Fort,
> Mumbai 400001
> India
> Tel. No. : Board   - 2353535 Ext. 4109
> 	   Direct  - 2354109
> Fax. No. : Network - 2731101/02 Ext. 4109
> 	   Direct  - 2731023
> 
> 

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.


From: "Kenneth Porter" <shiva at well dot com>
Date: Tue, 27 Nov 2001 00:48:32 -0800
Subject: Possible overrun constructing bulldb path

I'm inspecting the source to pop_dropcopy (v4.0.3) to see how to
disable bulletins without recompiling. The code that constructs the
path to the bulldb uses sprintf to append "/bulldb" to a possible
user-supplied string. What keeps the user from specifying an
overly-long path in his config file, causing qpopper to crash from a
buffer overrun?

Also, the code that checks for whether to use bulletins
(pop_dropcopy.c, line 1258) checks for a null p->bulldir. Is this set
to NULL when the user specifies an empty string in the config file? Or
is it just set to an empty string? Should that conditional be checking
for an empty string as well?

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Tue, 27 Nov 2001 14:27:40 +0100 (CET)
From: Xavier <xavier at rootshell dot be>
Subject: qpopper refuses (or slow) connections on port 110

Hi,

We have a Qpopper 4.03 running on a Tru64 box.
Suddenly (after 4 days), the qpopper (running in server/standalone
mode) refused connections on port 110 or was very sloooooow.

A stop/start fixed the problem.
Any idea?

Regards,
Xavier

--
http://www.rootshell.be
echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sb20293A2058554E494Csnlbxq'|dc


Date: Wed, 28 Nov 2001 12:35:27 +0100
From: Denny-Schierz <cuall at gmx dot de>
Subject: OpenSSL with qpopper 4.0.3

Guten Tag qpopper,

  hello, i have qpopper build with openssl with no errors. I created
  the certificates in /etc/mail/certs and changed the permissions. If
  i want to connect, i get this errors:

--------------------------------------------------------------------
Nov 28 12:19:26.565 2001 [8674] Set tls-support to STLS (2)
Nov 28 12:19:26.565 2001
Nov 28 12:19:26.567 2001 [8674] Set tls-server-cert-file to "/etc/mail/certs/cert.pem"
Nov 28 12:19:26.567 2001
Nov 28 12:19:26.588 2001 [8674] Error setting certificate PEM file /etc/mail/certs/cert.pem
Nov 28 12:19:26.588 2001
Nov 28 12:19:26.589 2001 [8674] ...SSL error: error:0D0A2007:asn1 encoding routines:d2i_X509_CINF:expecting an asn1 sequence
Nov 28 12:19:26.589 2001
Nov 28 12:19:26.590 2001 [8674] ...SSL error: error:0D09F004:asn1 encoding routines:d2i_X509:nested asn1 error
Nov 28 12:19:26.590 2001
Nov 28 12:19:26.590 2001 [8674] ...SSL error: error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib
Nov 28 12:19:26.590 2001
Nov 28 12:19:26.591 2001 [8674] ...SSL error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:missing asn1 eos
Nov 28 12:19:26.591 2001
Nov 28 12:19:26.591 2001 [8674] Failed initializing TLS/SSL

--------------------------------------------------------------------

does anybody know, what i have to do?

my System: Debian woody, openssl 0.9.6.b Kernel 2.2.17 gcc 2.95.2

-- 
Mit freundlichen Grüssen
Denny-Schierz                          mailto:cuall at gmx dot de


Date: Wed, 28 Nov 2001 12:57:25 +0100
From: Denny-Schierz <cuall at gmx dot de>
Subject: Re: OpenSSL with qpopper 4.0.3

Guten Tag Denny-Schierz,

Am Mittwoch, 28. November 2001 um 12:35 schrieben Sie:

DS> Guten Tag qpopper,

DS>   hello, i have qpopper build with openssl with no errors. I created
DS>   the certificates in /etc/mail/certs and changed the permissions. If
DS> ...

oh, now it works, i forgot the command "cat signed_req.pem >>
cert.pem"

thx




-- 
Mit freundlichen Grüssen
Denny-Schierz                            mailto:cuall at gmx dot de


From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 28 Nov 2001 05:38:24 -0800
Subject: Qpopper 4.0.4fc1 RPM available

On Tue, 6 Nov 2001 18:42:12 -0800, Randall Gellens wrote:

>Qpopper 4.0.4fc1 is available at 
><ftp://ftp.qualcomm.com/eudora/servers/unix/popper/beta/>.

An RPM and SRPM are now available:

http://www.sewingwitch.com/ken/SRPMS/qpopper-4.0.4-0.1.i386.rpm
http://www.sewingwitch.com/ken/SRPMS/qpopper-4.0.4-0.1.src.rpm

These have been configured to use DRAC. An RPM for DRAC is available in
the same directory:

http://www.sewingwitch.com/ken/SRPMS/dracd-1.11-1.i386.rpm
http://www.sewingwitch.com/ken/SRPMS/dracd-1.11-1.src.rpm

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



From: "Peter Santiago" <petersantiago at bigfoot dot com>
Subject: modifying qpopper srpm
Date: Wed, 28 Nov 2001 22:02:08 +0800

Sorry to bother you... If it happens that I would like to recompile Qpopper
using the SRPM package, how do I make the neccessary modification?
----- Original Message -----
From: "Kenneth Porter" <shiva at well dot com>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Wednesday, November 28, 2001 9:38 PM
Subject: Qpopper 4.0.4fc1 RPM available


> On Tue, 6 Nov 2001 18:42:12 -0800, Randall Gellens wrote:
>
> >Qpopper 4.0.4fc1 is available at
> ><ftp://ftp.qualcomm.com/eudora/servers/unix/popper/beta/>.
>
> An RPM and SRPM are now available:
>
> http://www.sewingwitch.com/ken/SRPMS/qpopper-4.0.4-0.1.i386.rpm
> http://www.sewingwitch.com/ken/SRPMS/qpopper-4.0.4-0.1.src.rpm
>
> These have been configured to use DRAC. An RPM for DRAC is available in
> the same directory:
>
> http://www.sewingwitch.com/ken/SRPMS/dracd-1.11-1.i386.rpm
> http://www.sewingwitch.com/ken/SRPMS/dracd-1.11-1.src.rpm
>
> Ken
> mailto:shiva at well dot com
> http://www.sewingwitch.com/ken/
> [If answering a mailing list posting, please don't cc me your reply. I'll
take my answer on the list.]
>


From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 28 Nov 2001 06:04:15 -0800
Subject: Re: modifying qpopper srpm

On Wed, 28 Nov 2001 22:02:08 +0800, Peter Santiago wrote:

>Sorry to bother you... If it happens that I would like to recompile Qpopper
>using the SRPM package, how do I make the neccessary modification?

It's not too difficult. First, I recommend rebuilding as a regular
user, not root. Check recent postings on the RPM mailing list for a
thread on how to set this up. (The list can be searched at Google
Groups.)

Then, "install" the SRPM ("rpm -i qpopper-4.0.4-0.1.src.rpm"), which
unpacks the sources (tarball and additional files) and the spec file
(rebuild instructions) into your RPM-building directory tree. You then
rebuild the SRPM into a binary RPM with the command "rpm -ba
qpopper.spec". If you just want to rebuild the SRPM without changing
the build options, use the command "rpm --rebuild
qpopper-4.0.4-0.1.src.rpm". This unpacks the source, builds it, and
packages it, all in one step. This is what I do with the SRPM's I
download from Red Hat.

The spec file is just a text file that describes how to build the
binary RPM from the source tarball and other files. It contains a
configure command to configure Qpopper. Edit that line to meet your own
needs and rebuild the package with "rpm -ba qpopper.spec".

For lots more info on RPM, visit http://www.rpm.org/.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Subject: Qpopper4.0.3 Solaris8 PAM /etc/pam.d/pop3
From: COtto-Lange at vwd dot de
Date: Thu, 29 Nov 2001 11:09:24 +0100

Hello *,

I try to install qpopper4.0.3 on a SUN an had read the FAQ 'How do I use
Qpopper with PAM'.

The example file /etc/pam.d/pop3 is written for Linux and
/etc/lib/security/pam* looks
very different on a Sparc.

Is there anybody who is running Qpopper on Solaris with PAM and can send me
his /etc/pam.d/pop3?

Thanks, Christian


Subject: DoS attack against Qpopper using non-existent "aaaaaaaaa" user name
Date: Thu, 29 Nov 2001 15:35:27 +0100 (MET)
From: Eric Luyten <Eric.Luyten at vub.ac dot be>

(Slightly off-topic, please forgive me and/or direct me to the proper forum.)


On our POP3 server (Qpopper 4.0.3, 20,000+ accounts and 250,000+ accesses per 
day) we have seen probes since day 1 but nowadays we observe an insane amount 
of POP3 login attempts using the (non-existing) "aaaaaaaaa" user name (9 "a"s).

Our site has already seen more than 10,000 connection attempts to "aaaaaaaaa" 
from midnight till 3 pm and they're really coming from all over the globe.

I'll start systematically shutting those addresses out using TCP wrappers.


I'd appreciate if a couple of large POP3 server managers check their
logfiles and tell me whether they're also experiencing this phenomenon.


Thx,
Eric Luyten, Computing Centre VUB/ULB.

Date: Thu, 29 Nov 2001 17:00:22 -0500
Subject: forcing qpopper to compile using cc
From: Christopher Scott <chrisjscott at mindspring dot com>

I'm trying to install qpopper 4 on my NeXTstep (!) machine and have been
told that it can be done if I compile it using cc instead of gcc (which
fails).

Unfortunately, ./configure --help doesn't list any flag that would let me do
this. Can anybody help me out?

-Chris


Date: Thu, 29 Nov 2001 23:14:00 +0100 (CET)
From: Michael Kjorling <michael at kjorling dot com>
Subject: Re: forcing qpopper to compile using cc

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Assuming bash:

$ export CC=cc
$ ./configure [optional parameters]

In short, set the CC environment variable to 'cc' before executing
'configure'.


Michael Kjörling


On Nov 29 2001 17:00 -0500, Christopher Scott wrote:

> I'm trying to install qpopper 4 on my NeXTstep (!) machine and have been
> told that it can be done if I compile it using cc instead of gcc (which
> fails).
>
> Unfortunately, ./configure --help doesn't list any flag that would let me do
> this. Can anybody help me out?
>
> -Chris

- -- 
Michael Kjörling  --  Programmer/Network administrator  ^..^
PGP: 95f1 074d 336d f8f0 f297 6a5b 2aa3 7bfd 8a70 e33e   \/
Internet: michael at kjorling dot com -- FidoNet: 2:204/254.4

"There is something to be said about not trying to be glamorous
and popular and cool. Just be real -- and life will be real."
(Joyce Sequichie Hifler, September 13 2001, www.hifler.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Public key is at http://michael.kjorling.com/contact/pgp.html

iD4DBQE8BrMtKqN7/Ypw4z4RAqXuAJ9ska//V15qYgphEZ6OW7sOghdh0gCXfcl1
IO/3y9NceljTEHekAEuBsQ=
¥tL
-----END PGP SIGNATURE-----



Date: Thu, 29 Nov 2001 19:29:27 -0600 (CST)
From: Ted Hatfield <ted at prismnet dot com>
Subject: How does qpopper 4.0.3 deal with UIDL?

Here is my situation.

I installed qpopper about a month ago when I migrated my userbase to a new
mail server.  

After the transfer I ran through the expected calls when the UIDL changed on
the mail spools and some clients began retrieving old mail again.

During this time things were working fine when I received a complaint.

I have a user with a mailbox being shared among 5 people using 4 different mail
clients.  These clients are setup to leave mail on server with one client set to
delete mail after X many days.

One of the clients "Eudora" was reading the Status header that Qpopper was
inserting header.  This had the effect of the user downloading email that was
shown as already read.

Consequently I recompiled with the disable-status option to keep Qpopper from
updating these headers with the understanding that my CPU load would increase
because UIDL would be recomputed everytime the spool was read.

This solved their problem and they were quite pleased.

Several days later I received another call from the same people.

It seems that several of the messages that one of their users was resending
using eudora showed up in their mail spool with identical X-UIDL headers.  

This had the effect of one of the messages being read by the mail clients but
the rest of the affected messages as unreadable as the client believe it had
already downloaded that email.

My theory so far (theory = wild ass guess) is that the user sending the
messages through Eudora (using the send again option) actually sent a message
with a X-UIDL header already included in it.  Sendmail and procmail left the
header in the message and Qpopper saw it and reported the bogus UIDL header to
the mail client when the uidl command was run.

My questions are:

If qpopper sees a X-UIDL header already in the message spool for a particular
message will it recompute a different UIDL or use the one in the header?  

Does the disable-status option affect the previous question?

How does qpopper compute UIDL?


Thanks for any input you have to my questions.


Ted Hatfield


Date: Thu, 29 Nov 2001 18:57:33 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?

At 7:29 PM -0600 11/29/01, Ted Hatfield wrote:

>Here is my situation.
>
>I installed qpopper about a month ago when I migrated my userbase to a new
>mail server. 
>
>After the transfer I ran through the expected calls when the UIDL changed on
>the mail spools and some clients began retrieving old mail again.
>
>During this time things were working fine when I received a complaint.
>
>I have a user with a mailbox being shared among 5 people using 4 
>different mail clients.  These clients are setup to leave mail on 
>server with one client set to delete mail after X many days.
>
>One of the clients "Eudora" was reading the Status header that Qpopper was
>inserting header.  This had the effect of the user downloading email that was
>shown as already read.

Is the desired behavior that each client download a distinct set of 
messages, or that each client downloads all the messages?  The latter 
is easier to deal with for everyone, I'd think, especially using POP. 
In that case, it should be no problem that the Eudora client 
downloads the message.  It's routine for people to have multiple 
installations of Eudora on different machines all downloading the 
same messages, with one copy deleting them.  The presence of the 
Status: header shouldn't affect which messages are downloaded. 
Eudora uses the UIDs for that.

Maybe I'm not understanding what the problem was.

>Consequently I recompiled with the disable-status option to keep Qpopper from
>updating these headers with the understanding that my CPU load would increase
>because UIDL would be recomputed everytime the spool was read.

(You can set and reset the option using a configuration file, to 
avoid the need to recompile.  This also allows you to set or reset it 
for some users only.)

>
>This solved their problem and they were quite pleased.
>
>Several days later I received another call from the same people.
>
>It seems that several of the messages that one of their users was resending
>using eudora showed up in their mail spool with identical X-UIDL headers. 
>
>This had the effect of one of the messages being read by the mail clients but
>the rest of the affected messages as unreadable as the client believe it had
>already downloaded that email.
>
>My theory so far (theory = wild ass guess) is that the user sending the
>messages through Eudora (using the send again option) actually sent a message
>with a X-UIDL header already included in it.  Sendmail and procmail left the
>header in the message and Qpopper saw it and reported the bogus UIDL header to
>the mail client when the uidl command was run.
>
>My questions are:
>
>If qpopper sees a X-UIDL header already in the message spool for a particular
>message will it recompute a different UIDL or use the one in the header?

It uses the X-UIDL header in the spool, as long as the value seems reasonable.

>
>Does the disable-status option affect the previous question?

No.

>
>How does qpopper compute UIDL?

It generates an MD5 hash of most of the message headers.  Some 
headers are skipped.  Also, and this is very important here, when 
disable-status is not set (the default) it includes a random 
component, to make sure no two messages have the same UID.  When 
disable-status is set, there is no random component (since UIDs need 
to always be the same for any message), and therefore there is a 
chance that two different messages could end up with the same UID.


-- 

Date: Thu, 29 Nov 2001 22:48:49 -0600 (CST)
From: Ted Hatfield <ted at prismnet dot com>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?

On Thu, 29 Nov 2001, Randall Gellens wrote:

> At 7:29 PM -0600 11/29/01, Ted Hatfield wrote:
> 
> >Here is my situation.
> >
> >I installed qpopper about a month ago when I migrated my userbase to a new
> >mail server. 
> >
> >After the transfer I ran through the expected calls when the UIDL changed on
> >the mail spools and some clients began retrieving old mail again.
> >
> >During this time things were working fine when I received a complaint.
> >
> >I have a user with a mailbox being shared among 5 people using 4 
> >different mail clients.  These clients are setup to leave mail on 
> >server with one client set to delete mail after X many days.
> >
> >One of the clients "Eudora" was reading the Status header that Qpopper was
> >inserting header.  This had the effect of the user downloading email that was
> >shown as already read.
> 
> Is the desired behavior that each client download a distinct set of 
> messages, or that each client downloads all the messages?  The latter 
> is easier to deal with for everyone, I'd think, especially using POP. 
> In that case, it should be no problem that the Eudora client 
> downloads the message.  It's routine for people to have multiple 
> installations of Eudora on different machines all downloading the 
> same messages, with one copy deleting them.  The presence of the 
> Status: header shouldn't affect which messages are downloaded. 
> Eudora uses the UIDs for that.
> 
> Maybe I'm not understanding what the problem was.

The desired behavior is that each client get all the messages.  That was
happening.  Since Qpopper was placing a Status header stating that the message
had already been "read", when eudora downloaded the message it sorted the
mail by that header and determined that any message which had already been
downloaded by other clients were not new to this particular client and therefore
not new.

 
> >Consequently I recompiled with the disable-status option to keep Qpopper from
> >updating these headers with the understanding that my CPU load would increase
> >because UIDL would be recomputed everytime the spool was read.
> 
> (You can set and reset the option using a configuration file, to 
> avoid the need to recompile.  This also allows you to set or reset it 
> for some users only.)
 
True,  My older pop client didn't save UIDL or status and I prefer it that
way.  My server load is not such that the extra cpu time is a problem.

> >
> >This solved their problem and they were quite pleased.
> >
> >Several days later I received another call from the same people.
> >
> >It seems that several of the messages that one of their users was resending
> >using eudora showed up in their mail spool with identical X-UIDL headers. 
> >
> >This had the effect of one of the messages being read by the mail clients but
> >the rest of the affected messages as unreadable as the client believe it had
> >already downloaded that email.
> >
> >My theory so far (theory = wild ass guess) is that the user sending the
> >messages through Eudora (using the send again option) actually sent a message
> >with a X-UIDL header already included in it.  Sendmail and procmail left the
> >header in the message and Qpopper saw it and reported the bogus UIDL header to
> >the mail client when the uidl command was run.
> >
> >My questions are:
> >
> >If qpopper sees a X-UIDL header already in the message spool for a particular
> >message will it recompute a different UIDL or use the one in the header?
> 
> It uses the X-UIDL header in the spool, as long as the value seems reasonable.
> 
> >
> >Does the disable-status option affect the previous question?
> 
> No.
>
> >
> >How does qpopper compute UIDL?
> 
> It generates an MD5 hash of most of the message headers.  Some 
> headers are skipped.  Also, and this is very important here, when 
> disable-status is not set (the default) it includes a random 
> component, to make sure no two messages have the same UID.  When 
> disable-status is set, there is no random component (since UIDs need 
> to always be the same for any message), and therefore there is a 
> chance that two different messages could end up with the same UID.
> 

Well since these messages all had X-UIDL headers in the mail spool one can
assume that the message was delivered that wasy because with the disable-status
option compiled in it wouldn't save that header.  

I think that sort of answers my question.

Thanks,

Ted Hatfield


From: Ted Cabeen <ted at impulse dot net>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?
Date: Fri, 30 Nov 2001 09:43:08 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <706428290393228654388 at lists.pensive dot org>, Ted Hatfield writes:
>True,  My older pop client didn't save UIDL or status and I prefer it that
>way.  My server load is not such that the extra cpu time is a problem.

If it's important, you can use formail and procmail to strip out the X-UIDL
headers when the messages are delivered.

- -- 
Ted Cabeen           http://www.pobox.com/~secabeen            ted at impulse dot net 
Check Website or Keyserver for PGP/GPG Key BA0349D2         secabeen at pobox dot com
"I have taken all knowledge to be my province." -F. Bacon  secabeen at cabeen dot org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen at netcom dot com


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (OpenBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE8B8UsoayJfLoDSdIRAmn2AJ0a00xQDpWWsrkLeW7FGs0JPjZjPACg2GC6
hGwAwX8/DNOaC0rEegoJYBU
=73Nm
-----END PGP SIGNATURE-----


Date: Fri, 30 Nov 2001 10:40:04 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?

At 10:48 PM -0600 11/29/01, Ted Hatfield wrote:

>  The desired behavior is that each client get all the messages.  That was
>  happening.  Since Qpopper was placing a Status header stating that 
> the message
>  had already been "read", when eudora downloaded the message it sorted the
>  mail by that header and determined that any message which had already been
>  downloaded by other clients were not new to this particular client 
> and therefore
>  not new.

I believe there is an option in Eudora to control how it determines 
this.  You can also create an incoming filter that sets the status of 
all new messages to unread.

Date: Fri, 30 Nov 2001 08:56:37 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Proposed solution for qpopper + imapd problem

  Specifically, how to have qpopper in server mode coexist with the UW
imapd.  Since these are two of the most popular open source
implementations of the two most popular mail retrieval protocols, it
seems like a good thing to fix.

  This seems to come up at least every few months on the list, and up
to now, as far as I know nobody has had a good solution.

  Right now, it's a little more urgent for me than "good thing to fix". 
We are committed to getting a customer-accessible webmail project into
beta (at least) by the end of the year - meaning next month - and
rolling it out soon after.  Based on our past testing, and knowing that
some customers leave multiple machines checking POP every few minutes,
we're fairly sure that if somebody starts a webmail (or any other) IMAP
session on one of those accounts, with qpopper running in server mode,
their mailspool will be corrupted in minutes.

  We are also fairly sure, based on what the load was like before we
implemented qpopper 4.0.3 and server mode, that if we turn server mode
back off, our main mail server will fall over and die; that's not even
an option for us.  So some of our admins here brainstormed and came up
with a possible alternative answer.

  What I'm proposing is to implement an optional patch which would make
qpopper aware in "read only mode" of when uw-imapd is running on a
particular user's mailbox, so that qpopper would refuse to start a POP
session in that case (just as if you tried to do multiple concurrent
POP sessions on the same mailbox.)

  Conversely, we'll need to patch UW imapd the same way, so it's aware
of qpopper's mutual exclusion lock, and will check (again "read only")
for a qpopper lock before it proceeds into an IMAP session, just as it
might check for a lock by another IMAP session.  This solution seems to
me like it would do the trick of making sure that you can never have a
concurrent qpopper and imapd session, provided the locks are checked in
the right order (i.e. get ones own lock first, then check for the other
party's lock.)  It also seems like we would need to add relatively few
lines of code to each daemon, though it will be critical that they are
in exactly the right place(s).

  Of course it will be up to the maintainers if we can get these
patches into either package, but it seems worth a shot.

  Any comments on this idea?  If it seems like it would work out, we're
shooting to start coding it by Dec 15 or thereabouts.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Fri, 30 Nov 2001 13:18:55 -0600 (CST)
From: Ted Hatfield <ted at prismnet dot com>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?

If there is an option to ignore the status header I couldn't find it.

Perhaps you can enlighten us.

Ted Hatfield

On Fri, 30 Nov 2001, Randall Gellens wrote:

> At 10:48 PM -0600 11/29/01, Ted Hatfield wrote:
> 
> >  The desired behavior is that each client get all the messages.  That was
> >  happening.  Since Qpopper was placing a Status header stating that 
> > the message
> >  had already been "read", when eudora downloaded the message it sorted the
> >  mail by that header and determined that any message which had already been
> >  downloaded by other clients were not new to this particular client 
> > and therefore
> >  not new.
> 
> I believe there is an option in Eudora to control how it determines 
> this.  You can also create an incoming filter that sets the status of 
> all new messages to unread.
> 


Date: Fri, 30 Nov 2001 12:35:01 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Proposed solution for qpopper + imapd problem

On Fri, Nov 30, 2001 at 02:22:50PM -0500, Michael Kolos wrote:
> Unless you really need the online storage of imap, why not try a package
> such as nocc (nocc.sourceforge.net) which can allow users to access their
> messages via the POP protocol that Qpopper already supports.
> 
> It's open source in PHP3, so it may be a good start - if you add on the use
> of a database mechanism for users to create folders and store messages and
> adressbooks, etc. then you may find a solution that can easily run on
> another machine, and save the problem
> 
> I know that you're trying to fix a problem, but avoiding it seems like it
> can also be a good possibility.
> Nocc already supports many languages, is themable, and the new version
> (which I haven't tried yet) is said to include some user customizing
> features as well.
> Might be worth a look - save you some work and time.

  Good suggestion, wish we'd heard of this several months ago!

  We could at least have stacked it up against the IMAP-based webmail
packages we tried out to see how it compared.  For the curious, we did
some basic in-house testing and evaluation of 4 different packages, and
ended up picking "Silkymail" (a heavily modified IMP) as the best, with
Squirrelmail very close behind and better in some ways.  The fairly
popular IMP and TWIG did very poorly when we asked people to rate them
on usability and "friendliness" for doing a few basic email tasks.  So
at this point we are fairly committed to doing one of those two
top-rated packages; one month would not be a lot of time to back out of
it and evaluate a whole separate package.

  But I do appreciate the suggestion; this might be an excellent
suggestion for others who want to avoid this problem.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Fri, 30 Nov 2001 18:18:40 -0500
From: Daniel Senie <dts at senie dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

At 05:35 PM 11/30/01, Clifton Royston wrote:
>On Fri, Nov 30, 2001 at 02:22:50PM -0500, Michael Kolos wrote:
> > Unless you really need the online storage of imap, why not try a package
> > such as nocc (nocc.sourceforge.net) which can allow users to access their
> > messages via the POP protocol that Qpopper already supports.
> >
> > It's open source in PHP3, so it may be a good start - if you add on the use
> > of a database mechanism for users to create folders and store messages and
> > adressbooks, etc. then you may find a solution that can easily run on
> > another machine, and save the problem
> >
> > I know that you're trying to fix a problem, but avoiding it seems like it
> > can also be a good possibility.
> > Nocc already supports many languages, is themable, and the new version
> > (which I haven't tried yet) is said to include some user customizing
> > features as well.
> > Might be worth a look - save you some work and time.
>
>   Good suggestion, wish we'd heard of this several months ago!

I have to thank you as well. I've been looking at various packages for 
this, and so far NOCC looks pretty decent. It appears there are some rough 
edges to work out, but I'm going to go down this path for a little while 
and see what I find.

>   But I do appreciate the suggestion; this might be an excellent
>suggestion for others who want to avoid this problem.

Thanks for thinking of others. I will let folks know how I make out with 
the program.

Dan
-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


Date: Fri, 30 Nov 2001 15:48:18 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

At 8:56 AM -1000 11/30/01, Clifton Royston wrote:

>Based on our past testing, and knowing that
>some customers leave multiple machines checking POP every few minutes,
>we're fairly sure that if somebody starts a webmail (or any other) IMAP
>session on one of those accounts, with qpopper running in server mode,
>their mailspool will be corrupted in minutes.

Someone (and I apologize for forgetting who that was) suggested an 
option for Qpopper to hold the spool lock for the duration of the 
session.  That might be a good way around this problem, assuming 
IMAPD locks the spool.
-- 

Date: Fri, 30 Nov 2001 15:57:29 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: How does qpopper 4.0.3 deal with UIDL?

At 1:18 PM -0600 11/30/01, Ted Hatfield wrote:

>If there is an option to ignore the status header I couldn't find it.
>
>Perhaps you can enlighten us.

In the Mac its in the UI.  On Windows it's in the eudora.ini file:
	FirstUnreadNormal
	FirstUnreadStatus
	UsePOPLast

See the Eudora Tech Support Knowledge Base, such as 
<http://www.eudora.com/techsupport/kb/1351hq.html>.
-- 

Date: Fri, 30 Nov 2001 14:15:31 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Proposed solution for qpopper + imapd problem

On Fri, Nov 30, 2001 at 03:48:18PM -0800, Randall Gellens wrote:
> At 8:56 AM -1000 11/30/01, Clifton Royston wrote:
> >Based on our past testing, and knowing that
> >some customers leave multiple machines checking POP every few minutes,
> >we're fairly sure that if somebody starts a webmail (or any other) IMAP
> >session on one of those accounts, with qpopper running in server mode,
> >their mailspool will be corrupted in minutes.
> 
> Someone (and I apologize for forgetting who that was) suggested an 
> option for Qpopper to hold the spool lock for the duration of the 
> session.  That might be a good way around this problem, assuming 
> IMAPD locks the spool.

  It certainly does, or it would get horrendous corruption from mail
delivery.  I did find that in the archives and we discussed this as a
different option for how to solve the problem.

  However... I have a gut feeling there could be problems which would
result in the mail delivery system (local MTA) from long POP sessions
holding the mail spool lock for too long and causing incoming mail to
back up into the mail queue.  From what I remember there may also be
some threshold or age at which the mail program will typically decide
the lock on the spool is "stale" and will force it.  And I think this
is only in the 5 or 10 minute range.  (Don't quote me on this...)

  If someone can conclusively debunk my fears about those possible
side-effects, we'd be very interested, as this would be a simpler
change, I think.

  A third option we discussed was simply adding an independent mail
session lock to both qpopper and imapd; it didn't seem like this was
necessarily better than consulting the locking methods each is already
using.  (Unless one were going to try to add this to many daemons
besides these two.)

  I could see one more option which would be distinctly better than
this but which would involve major rewrites of large sections of
qpopper - it would have to become smart enough to tell that the spool
had been updated in some way other than via mail delivery appending to
it, check for this condition at the end of a server mode session, and
revert to something like its non-server-mode method of updating the
mailbox by merging changes made from its own session back into whatever
remains in the spool.  That seems like a whole lot of code to write.

  I'm quite willing to entertain other solutions, especially if
someone's got a nice simple one!
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Fri, 30 Nov 2001 16:58:27 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

At 2:15 PM -1000 11/30/01, Clifton Royston wrote:

>I have a gut feeling there could be problems which would
>result in the mail delivery system (local MTA) from long POP sessions
>holding the mail spool lock for too long and causing incoming mail to
>back up into the mail queue.

That may be a concern; it depends on how quick the POP session is. 
POP sessions typically are much shorter than IMAP sessions.

>  From what I remember there may also be
>some threshold or age at which the mail program will typically decide
>the lock on the spool is "stale" and will force it.  And I think this
>is only in the 5 or 10 minute range.  (Don't quote me on this...)

I believe it's usually five minutes.  Programs are supposed to 
refresh the lock by updating the timestamp (like touch(1)) at least 
once per minute to avoid a waiter assuming the lock is stale. 
Qpopper does this currently during spool processing (initialization 
and cleanup), so if an option were added to keep the spool locked for 
the duration of the session, a call on Qtouchlock() should be added 
somewhere convenient, such as the command loop in popper.c.

It might be better, but more kludgy, to do this in tgetline(), and 
additionally ensure that the alarm is set to one minute or less.  If 
the session timeout is larger than a minute, tgetline() can set the 
alarm for 1-minute intervals (actually, one minute or remaining 
session timeout seconds, whichever is smaller), refresh the lock, 
then set a new alarm for min(60, timeout-time_waited).


-- 

Date: Fri, 30 Nov 2001 16:56:59 -0800 (PST)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

> Date: Fri, 30 Nov 2001 14:15:31 -1000
> From: Clifton Royston <cliftonr at lava dot net>
> 
[...snip...]
> back up into the mail queue.  From what I remember there may also be
> some threshold or age at which the mail program will typically decide
> the lock on the spool is "stale" and will force it.  And I think this
> is only in the 5 or 10 minute range.  (Don't quote me on this...)

Configurable in sendmail.cf, but typically at 6 minutes.

Regards,
Gregory Hicks

> 
[...snip...]
---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.


From: "Shaun Bennett" <shaunbennett at sbconsultancy dot net>
Subject: Qpopper with Outlook help needed
Date: Sun, 2 Dec 2001 15:55:44 -0000

Hi

I'm a newbie to Linux in general - I'm usuing SUSE 7.1
I've configured sendmail and got it sending mail out. I'm using Qpopper on
the understanding (misguided?) that it will contact out ISP's POP3 server,
download the mails and dump them in their repective mail boxes and will also
ship those mails from the mail boxes to the relevant MUA when asked.

Questions 1) Is my understanding of Qpopper right?

2) How do i define the pop3 server in outlook when using qpopper running on
suse7.1 - is it just the domain name of the server?

3) Why can't i see the PID of popper when i do ps -A? - has it failed to
start
from my inetd.conf file?

4) Do i have to tell qpopper the username and passowrds of the email clients
around the network, so that they can download their mail to their MUA's? or
is qpopper simply a retrieval system from a pop3 server? - and if so back to
question1?

If you need any further information in order to answer some/all of my
queries please don't hesitate to ask.

I'd really appreciate a little help here and thank anyone in advance for a
reply.

shaun


Shaun Bennett
Shaun Bennett Consultancy
email: shaunbennett at sbconsultancy dot net

Tel: 01942 708578 Mob: 07811 903898


Date: Sun, 2 Dec 2001 11:26:38 -0800 (PST)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Qpopper with Outlook help needed

I could be wrong, but I don't think that popper supports this type of
model.  popper is designed to work with the end user's MUA.  popper is
not an MTA as is sendmail.  uucp model perhaps...?

Have you tried 'fetchmail' or 'formail' to move the mail from the ISP
to the local mail server?

Failing that, you could work with the ISP to set up your accounts as a
mail gateway (ontheir end) and they forward directly to your mail
server (requires an MTA on the server - usually, but does not have to
be, sendmail - to receive and queue the mail...  The server then
requires it's own popper.

Of course, this requires that you - or your ISP - provide DNS services
complete with MX records to direct the mail...  You *do* have your own
name space...?

Regards,
Gregory Hicks

> From: "Shaun Bennett" <shaunbennett at sbconsultancy dot net>
> Date: Sun, 2 Dec 2001 15:55:44 -0000
> 
> Hi
> 
> I'm a newbie to Linux in general - I'm usuing SUSE 7.1
> I've configured sendmail and got it sending mail out. I'm using 
Qpopper on
> the understanding (misguided?) that it will contact out ISP's POP3 
server,
> download the mails and dump them in their repective mail boxes and 
will also
> ship those mails from the mail boxes to the relevant MUA when asked.
> 
> Questions 1) Is my understanding of Qpopper right?
> 
> 2) How do i define the pop3 server in outlook when using qpopper 
running on
> suse7.1 - is it just the domain name of the server?
> 
> 3) Why can't i see the PID of popper when i do ps -A? - has it failed 
to
> start
> from my inetd.conf file?
> 
> 4) Do i have to tell qpopper the username and passowrds of the email 
clients
> around the network, so that they can download their mail to their 
MUA's? or
> is qpopper simply a retrieval system from a pop3 server? - and if so 
back to
> question1?
> 
> If you need any further information in order to answer some/all of my
> queries please don't hesitate to ask.
> 
> I'd really appreciate a little help here and thank anyone in advance 
for a
> reply.
> 
> shaun
> 
> 
> Shaun Bennett
> Shaun Bennett Consultancy
> email: shaunbennett at sbconsultancy dot net
> 
> Tel: 01942 708578 Mob: 07811 903898
> 

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.


Date: Sun, 2 Dec 2001 15:34:45 -0600 (CST)
From: =?iso-8859-1?q?José Vicente Núñez Zuleta?= <josevnz at yahoo dot com>
Subject: I cannot make SSL to work on Solaris 2.7 (long post)

Greetings,

This is the whole setup i made to use SSL with Qpper
(is working good but without SSL):

1) Install OpenSSL under Solaris
(http://www.openssl.org/):
./config
make
make test
make install

2) Install the entropy socket daemon egd, because
Solaris doesn't have a /dev/random:
(http://www.lothar.com/tech/crypto/,
http://egd.sourceforge.net/,
http://prdownloads.sourceforge.net/egd/egd-0.8.README)

perl Makefile.PL
make
make test
make install

And add the following script to your /etc/init.d
directory:

#! /bin/sh
#
# start/stop the egd (Entropy Generator) Daemon
# This daemon generate a device called /dev/egd-pool
# as a source of random numbers for Unix
# Link as /etc/rc2.d/S99egd and /etc/rc2.d/K99egd
# josevnz at yahoo dot com - 01/12/2001

case "$1" in

'start')
        # Start the egd deamon
        if [ -f /usr/local/bin/egd.pl ]; then
                echo "starting EGD daemon"
                /usr/local/bin/egd.pl /dev/egd-pool
fi
        ;;

'stop')
        # Stop the egd deamon
        PID=`/usr/bin/ps -e -u 0|/usr/bin/fgrep
egd.pl|/usr/bin/awk '{print $1}'`
        if [ ! -z "$PID" ] ;  then
                /usr/bin/kill ${PID} 1>/dev/null 2>&1
        fi
        ;;
esac

And start the daemon:

/etc/init.d/egd start

3) To compile and configure Qpopper
./configure --with-openssl=/usr/local/ssl
--enable-log-facility=LOG_MAIL --enable-log-login
--enable-specialauth
make

4) Create the digital certificate:

(Wait like 10 min to allow the egd to gather enough
entropy)

Please read:
http://www.sendmail.org/~ca/email/other/cagreg.html

To make certificate authority:
cd /usr/local/openssl
mkdir CA
cd CA
mkdir certs crl newcerts private
echo "01" > serial
cp /dev/null index.txt
cp /usr/local/openssl/openssl.cnf.sample
/usr/local/ssl/openssl.cnf
vi /usr/local/ssl/openssl.cnf   (set values, use
absolute routes)
openssl req -new -x509 -keyout private/cakey.pem -out
cacert.pem -days 365 -config
/usr/local/ssl/openssl.cnf -rand /dev/egd-pool

To make a new certificate:
openssl req -nodes -new -x509 -keyout newreq.pem -out
newreq.pem -days 365 -config
/usr/local/ssl/openssl.cnf -rand /dev/egd-pool

(certificate and private key in file newreq.pem) To
sign new certificate with certificate authority:
openssl x509 -x509toreq -in newreq.pem -signkey
newreq.pem -out tmp.pem
openssl ca -config /usr/local/ssl/openssl.cnf -policy
policy_anything -out newcert.pem -infiles tmp.pem
rm -f tmp.pem



5) Prepare the qopper.conf file to use ssl
(/usr/local/etc/qpopper.conf):
set tls-support= stls
set
tls-server-cert-file='/usr/local/ssl/CA/newcert.pem'
set
tls-private-key-file='/usr/local/ssl/CA/newreq.pem'

6) Now install and configure the rest of Qppoper
(http://www.eudora.com/qpopper) :
./configure --enable-log-facility=LOG_MAIL
--enable-log-login --enable-specialauth
--with-openssl=/usr/local/ssl
make
make install

Add a like like this to the /etc/inetd.conf:
pop3 stream tcp nowait root /usr/local/sbin/popper
qpopper -f /usr/local/etc/qpopper.conf -s

7) Make sure pop is listed in your /etc/services file
# cat /etc/services | grep pop
pop2            109/tcp         pop-2           # Post
Office Protocol - V2
pop3            110/tcp                         # Post
Office Protocol - Version 3
pop-2           109/tcp                         # Post
Office

And add the openssl library to the LD_LIBRARY_PATH in
/etc/profile:

# System wide libraries - Jose Vicente
(josevnz at yahoo dot com)
LD_LIBRARY_PATH=/usr/local/ssl/lib
LD_RUN_PATH=/usr/local/ssl/lib

8) restart inetd.conf (example):
# ps -ef|grep inetd
    root  6014     1  0 20:40:29 ?        0:01
/usr/sbin/inetd -s
    root 29990  9286  0 13:58:34 pts/4    0:00 grep
inetd
# kill -HUP  6014

9) Connect to the port 110 at localhost to test the
instalation:
# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK Qpopper (version 4.0.3) at lenbkx0001 starting.  
^]
telnet> q
Connection closed.

Netscape and Outlook are able to connect to this setup
without using SSL; If i set up SSL the clients just
hangs up or throws an error.

Also if i change the configuration to this (to support
netscape 6 for example):
# http://80211b.weblogger.com/2001/08/12
set tls-support = alternate-port
#set tls-support = none
#set tls-support= stls
set
tls-server-cert-file='/usr/local/ssl/CA/newcert.pem'
set
tls-private-key-file='/usr/local/ssl/CA/newreq.pem'

I just get a "Connection refused error" when going to
the port 995!.

Any ideas are welcome, thanks in advance

JV.

====
System Engineer, José Vicente Nuñez Zuleta (josevnz at yahoo dot com)
Newbreak System Administrator (http://www.newbreak.com)
Phone: 203-355-1511, 203-355-1510
Java 2 Certified Programmer
Java 2 Certified Developer

_________________________________________________________
Do You Yahoo!?
¿Quieres armar tu própia página Web pero no sabes HTML?
Usa los asistentes de edición de Yahoo! Geocities
y tendrás un sitio en sólo unos minutos.
Visítanos en http://espanol.geocities.yahoo.com

Date: Sun, 2 Dec 2001 16:50:07 -0600 (CST)
From: =?iso-8859-1?q?José Vicente Núñez Zuleta?= <josevnz at yahoo dot com>
Subject: Qppoper and SSL on Solaris 7: Not working (setup steps provided)

here are the steps i followed to run Qppoper using
SSL:

More info at http://80211b.weblogger.com/2001/08/12

1) Install OpenSSL under Solaris
(http://www.openssl.org/):
./config
make
make test
make install

2) Install the entropy socket daemon egd, because
Solaris doesn't have a /dev/random:
(http://www.lothar.com/tech/crypto/,
http://egd.sourceforge.net/,
http://prdownloads.sourceforge.net/egd/egd-0.8.README)

perl Makefile.PL
make
make test
make install

And add the following script to your /etc/init.d
directory:

#! /bin/sh
#
# start/stop the egd (Entropy Generator) Daemon
# This daemon generate a device called /dev/egd-pool
# as a source of random numbers for Unix
# Link as /etc/rc2.d/S99egd and /etc/rc2.d/K99egd
# josevnz at yahoo dot com - 01/12/2001

case "$1" in

'start')
        # Start the egd deamon
        if [ -f /usr/local/bin/egd.pl ]; then
                echo "starting EGD daemon"
                /usr/local/bin/egd.pl /dev/egd-pool
fi
        ;;

'stop')
        # Stop the egd deamon
        PID=`/usr/bin/ps -e -u 0|/usr/bin/fgrep
egd.pl|/usr/bin/awk '{print $1}'`
        if [ ! -z "$PID" ] ;  then
                /usr/bin/kill ${PID} 1>/dev/null 2>&1
        fi
        ;;
esac

And start the daemon:

/etc/init.d/egd start

3) To compile and configure Qpopper
./configure --with-openssl=/usr/local/ssl
--enable-log-facility=LOG_MAIL --enable-log-login
--enable-specialauth
make

4) Create the digital certificate:

mkdir -p -m665 /etc/mail/certs
chown root:mail /etc/mail/certs
chmod 660 /etc/mail/certs

(Wait like 10 min to allow the egd to gather enough
entropy)

Please read:
http://www.sendmail.org/~ca/email/other/cagreg.html

To make certificate authority:
cd /usr/local/openssl
mkdir CA
cd CA
mkdir certs crl newcerts private
echo "01" > serial
cp /dev/null index.txt
cp /usr/local/openssl/openssl.cnf.sample
/usr/local/ssl/openssl.cnf
vi /usr/local/ssl/openssl.cnf   (set values, use
absolute routes)
openssl req -new -x509 -keyout private/cakey.pem -out
cacert.pem -days 365 -config
/usr/local/ssl/openssl.cnf -rand /dev/egd-pool

To make a new certificate:
openssl req -nodes -new -x509 -keyout newreq.pem -out
newreq.pem -days 365 -config
/usr/local/ssl/openssl.cnf -rand /dev/egd-pool

(certificate and private key in file newreq.pem) To
sign new certificate with certificate authority:
openssl x509 -x509toreq -in newreq.pem -signkey
newreq.pem -out tmp.pem
openssl ca -config /usr/local/ssl/openssl.cnf -policy
policy_anything -out newcert.pem -infiles tmp.pem
rm -f tmp.pem


5) Prepare the qopper.conf file to use ssl
(/usr/local/etc/qpopper.conf):
set tls-support= stls
set
tls-server-cert-file='/usr/local/ssl/CA/newcert.pem'
set
tls-private-key-file='/usr/local/ssl/CA/newreq.pem'

6) Now install and configure the rest of Qppoper
(http://www.eudora.com/qpopper) :
./configure --enable-log-facility=LOG_MAIL
--enable-log-login --enable-specialauth
--with-openssl=/usr/local/ssl
make
make install

Add a like like this to the /etc/inetd.conf:
pop3 stream tcp nowait root /usr/local/sbin/popper
qpopper -f /usr/local/etc/qpopper.conf -s

7) Make sure pop is listed in your /etc/services file
# cat /etc/services | grep pop
pop2            109/tcp         pop-2           # Post
Office Protocol - V2
pop3            110/tcp                         # Post
Office Protocol - Version 3
pop-2           109/tcp                         # Post
Office

And add the openssl library to the LD_LIBRARY_PATH in
/etc/profile:

# System wide libraries - Jose Vicente
(josevnz at yahoo dot com)
LD_LIBRARY_PATH=/usr/local/ssl/lib
LD_RUN_PATH=/usr/local/ssl/lib

8) restart inetd.conf (example):
# ps -ef|grep inetd
    root  6014     1  0 20:40:29 ?        0:01
/usr/sbin/inetd -s
    root 29990  9286  0 13:58:34 pts/4    0:00 grep
inetd
# kill -HUP  6014

9) Connect to the port 110 at localhost to test the
instalation:
# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK Qpopper (version 4.0.3) at lenbkx0001 starting.  
^]
telnet> q
Connection closed.




====
System Engineer, José Vicente Nuñez Zuleta (josevnz at yahoo dot com)
Newbreak System Administrator (http://www.newbreak.com)
Phone: 203-355-1511, 203-355-1510
Java 2 Certified Programmer
Java 2 Certified Developer

_________________________________________________________
Do You Yahoo!?
¿Quieres armar tu própia página Web pero no sabes HTML?
Usa los asistentes de edición de Yahoo! Geocities
y tendrás un sitio en sólo unos minutos.
Visítanos en http://espanol.geocities.yahoo.com

Date: Mon, 3 Dec 2001 12:27:18 -0500
From: Christina Plummer <chpr at mail.rochester dot edu>
Subject: Outlook XP errors with qpopper 3.1

One of our users (actually, a co-worker) tried installing Office XP and
using the new version of Outlook that came with it.  It worked fine on our
Solaris 7 machine running qpopper 3.1, but failed on our IRIX 6.5 machine
running the same version with the same configure options.  Here are the
errors from IRIX box:

Dec  3 11:00:51 6W:server1 qpopper[5563245]: connect from
XXXX
Dec  3 11:00:51 5V:server1 qpopper[5563245]: EOF from  at 255.255.255.255
(XXXX): [0] 0 (Error 0); 0 (Error 0)
Dec  3 11:00:51 5V:server1 qpopper[5563245]: (null) at
XXXX (255.255.255.255): -ERR POP EOF or I/O Error: 0
(Error 0); 0 (Error 0)

Outlook Express works just fine.  Has anyone else experienced any
squirrely-ness with Outlook XP, or have any idea why the user here is
coming up null?

Thanks,

  Christina



From: Ted Cabeen <ted at impulse dot net>
Subject: Re: Qpopper with Outlook help needed
Date: Mon, 03 Dec 2001 09:50:51 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <511327594137901115684 at lists.pensive dot org>, "Shaun Bennett" writes:
>I'm a newbie to Linux in general - I'm usuing SUSE 7.1
>I've configured sendmail and got it sending mail out. I'm using Qpopper on
>the understanding (misguided?) that it will contact out ISP's POP3 server,
>download the mails and dump them in their repective mail boxes and will also
>ship those mails from the mail boxes to the relevant MUA when asked.
>
>Questions 1) Is my understanding of Qpopper right?

Nope.  Qpopper is a POP3 server.  It is the program that email clients 
connect to to download their email.  The program you want is fetchmail.  
However, fetchmail is really designed to be used either by a single user or 
by someone on a temporary (dialup/ISDN/etc.) link.  If you have full-time 
connectivity and a static IP space, it would probably be better for you to 
have your ISP send the mail to this SUSE box and then have your clients 
connect to the SUSE box to get their email.  Qpopper could then be used to 
allow the clients to download their email.

You should be able to contact your ISP for help setting up this system.

- -- 
Ted Cabeen           http://www.pobox.com/~secabeen            ted at impulse dot net 
Check Website or Keyserver for PGP/GPG Key BA0349D2         secabeen at pobox dot com
"I have taken all knowledge to be my province." -F. Bacon  secabeen at cabeen dot org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen at netcom dot com


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (OpenBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE8C7t7oayJfLoDSdIRAoRbAKC6xVV0o6c2ha9Hja70ryBtuLCWIwCdEM5i
eVBjr9j1TrNSKrrrFqoCEQg
=FfoE
-----END PGP SIGNATURE-----


Date: Mon, 03 Dec 2001 17:42:34 -1000
From: Robert Brewer <rbrewer at lava dot net>
Subject: Re: Proposed solution for qpopper + imapd problem

--On Friday, November 30, 2001 4:58 PM -0800 Randall Gellens 
<randy at qualcomm dot com> wrote:

> At 2:15 PM -1000 11/30/01, Clifton Royston wrote:
>
>> I have a gut feeling there could be problems which would
>> result in the mail delivery system (local MTA) from long POP sessions
>> holding the mail spool lock for too long and causing incoming mail to
>> back up into the mail queue.
>
> That may be a concern; it depends on how quick the POP session is. POP
> sessions typically are much shorter than IMAP sessions.

Unfortunately, users on dialup that receive large attachments or have 
particularly noisy phone lines can have quite long POP sessions, longer than 
one hour. Even if the POP sessions are short, if they happen frequently 
enough (like every 2 minutes) the odds are that spools will get corrupted if 
there is also a long-term UW-IMAP session going.

Date: Tue, 04 Dec 2001 16:45:09 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: [0] 2 (No such file or directory); client crashes when trying to

hello

I've setup a sendmail server for SMTP and qpopper 3.1.2 for POP3
accounts.  Qpopper is great and works really well BUT I have a problem:
All our mailclients are Microsoft Entourage or Microsoft Outlook (I can
see your faces now, but that isn't the real problem).  We have a couple
of mailboxes that have, by now, about 300 mails in them.  When I try to
get the mail of one of those accounts, Microsoft Entourage crashes,
giving me an error 3, unexpected error. (Microsoft Outlook does the same
thing)  After that, you can check the mail, but it isn't there (qpopper
moved it from /var/spool/mail/ to /var/dropmail).  After a few minutes,
its back in /var/spool/mail, waiting to be downloaded.  

When I look in my logs, I get this:

[snip]

Dec  4 12:28:04 alexandria popper[30862]: EOF from accountname at
192.168.1.20): [0] 2 (No such file or directory); 0 (Success)
Dec  4 12:28:04 alexandria popper[30862]: pascale.fr at 192.168.1.20
(192.168.1.20) -ERR POP EOF or I/O Error: 2 (No such file or directory);
0 Success

[/snip]

the "no such file or directory" is some reference to the mailfile that
has been moved to /var/dropmail, I think...  In the meantime, these
people can't retrieve their mail using their mailclients, but have to
use obscure webmail products...

Any ideas how to solve this problem?


kind regards


Tom Van de Wiele






-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Date: Tue, 04 Dec 2001 16:51:07 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: Re: [0] 2 (No such file or directory); client crashes when trying to

pascale.fr == accountname

I was about to replace pascale.fr with accountname, but I missed one ;)



Tom Van de Wiele wrote:
> 
> hello
> 
> I've setup a sendmail server for SMTP and qpopper 3.1.2 for POP3
> accounts.  Qpopper is great and works really well BUT I have a problem:
> All our mailclients are Microsoft Entourage or Microsoft Outlook (I can
> see your faces now, but that isn't the real problem).  We have a couple
> of mailboxes that have, by now, about 300 mails in them.  When I try to
> get the mail of one of those accounts, Microsoft Entourage crashes,
> giving me an error 3, unexpected error. (Microsoft Outlook does the same
> thing)  After that, you can check the mail, but it isn't there (qpopper
> moved it from /var/spool/mail/ to /var/dropmail).  After a few minutes,
> its back in /var/spool/mail, waiting to be downloaded.
> 
> When I look in my logs, I get this:
> 
> [snip]
> 
> Dec  4 12:28:04 alexandria popper[30862]: EOF from accountname at
> 192.168.1.20): [0] 2 (No such file or directory); 0 (Success)
> Dec  4 12:28:04 alexandria popper[30862]: pascale.fr at 192.168.1.20
> (192.168.1.20) -ERR POP EOF or I/O Error: 2 (No such file or directory);
> 0 Success
> 
> [/snip]
> 
> the "no such file or directory" is some reference to the mailfile that
> has been moved to /var/dropmail, I think...  In the meantime, these
> people can't retrieve their mail using their mailclients, but have to
> use obscure webmail products...
> 
> Any ideas how to solve this problem?
> 
> kind regards
> 
> Tom Van de Wiele
> 
> --
> Tom Van de Wiele
> System Administrator
> 
> Eduline
> Colonel Bourgstraat 105a
> 1140 Brussel
> http://www.eduline.be

-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Date: Tue, 4 Dec 2001 10:44:47 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

At 5:42 PM -1000 12/3/01, Robert Brewer wrote:

>Unfortunately, users on dialup that receive large attachments or 
>have particularly noisy phone lines can have quite long POP 
>sessions, longer than one hour.

That could cause problems with local mail delivery, since the spool 
would be locked presumably longer than the specified timeout, causing 
inbound mail to bounce.

>  Even if the POP sessions are short, if they happen frequently 
>enough (like every 2 minutes) the odds are that spools will get 
>corrupted if there is also a long-term UW-IMAP session going.

They wouldn't get corrupted if the spool was kept locked.  However, 
either the POP or the IMAP session would get an error and be unable 
to proceed while the other was active.  The point of locking the 
spool is to prevent simultaneous access.



-- 

Date: Tue, 4 Dec 2001 10:54:28 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: I cannot make SSL to work on Solaris 2.7 (long post)

At 3:34 PM -0600 12/2/01, JosŽ Vicente Nœ–ez Zuleta wrote:

>Netscape and Outlook are able to connect to this setup
>without using SSL; If i set up SSL the clients just
>hangs up or throws an error.

Probably the client are trying to use alternate-port instead of STLS. 
That is the case with many older clients or those that don't keep up 
with the standards.

>Also if i change the configuration to this (to support
>netscape 6 for example):
># http://80211b.weblogger.com/2001/08/12
>set tls-support = alternate-port
>#set tls-support = none
>#set tls-support= stls
>set
>tls-server-cert-file='/usr/local/ssl/CA/newcert.pem'
>set
>tls-private-key-file='/usr/local/ssl/CA/newreq.pem'
>
>I just get a "Connection refused error" when going to
>the port 995!.

In order to have Qpopper support alternate-port you also need to 
modify your inetd.conf file to have it listen on port 995 and run 
Qpopper, with the specified configuration file.

You may want to have Qpopper support both STLS and alternate-port. 
See the Qpopper Administrator's Guide for information.



-- 

Date: Tue, 4 Dec 2001 11:11:47 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: [0] 2 (No such file or directory); client crashes when

Try enabling debug tracing to see what is going on.

To enable tracing in Qpopper:

1.  Do a 'make clean'
2.  Re-run ./configure, adding '--enable-debugging'.
3.  Edit the inetd.conf line for Qpopper, adding '-d' or '-t <tracefile-path>'.
4.  Send inetd (or xinetd) a HUP signal.

(Steps 3 and 4 are only needed if you use inetd (or xinetd).  In 
standalone mode, you can add '-d' or '-t <tracefile-path>' to the 
command line directly.)

(In either standalone or inetd mode, if you use a configuration file 
you can add 'set debug' or 'set tracefile = <tracefile>' to either a 
global or user-specific configuration file instead of steps 3 and 4.)

This causes detailed tracing to be written to the syslog or to the 
file specified as 'tracefile'.

-- 

Date: Tue, 4 Dec 2001 11:03:55 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: [0] 2 (No such file or directory); client crashes when trying to download mail

On Tue, Dec 04, 2001 at 04:45:09PM +0100, Tom Van de Wiele wrote:
> hello
> 
> I've setup a sendmail server for SMTP and qpopper 3.1.2 for POP3
> accounts.  Qpopper is great and works really well BUT I have a problem:
> All our mailclients are Microsoft Entourage or Microsoft Outlook (I can
> see your faces now, but that isn't the real problem).  We have a couple
> of mailboxes that have, by now, about 300 mails in them.  When I try to
> get the mail of one of those accounts, Microsoft Entourage crashes,
> giving me an error 3, unexpected error. (Microsoft Outlook does the same
> thing)  After that, you can check the mail, but it isn't there (qpopper
> moved it from /var/spool/mail/ to /var/dropmail). 

This sounds like an old qpopper 3 behavior, if I'm remembering
correctly. It sounds like your qpopper is not properly handling the
condition where the client has "gone away" unexpectedly, and therefore
does not put the spool back.  Qpopper 4.0.3 should handle this; I'm
pretty sure we used to see this style of behavior but no longer do.

So that would be my first recommendation - upgrade qpopper.  It's a
fairly painless transition, and you will also have an easier time
getting help with a newer version.

> After a few minutes,
> its back in /var/spool/mail, waiting to be downloaded.  

The real problem is: why are Entourage and Outlook crashing?  

It might be cured by a qpopper upgrade, but that's probably wishful
thinking on my part. (Though I think we have this type of problem less
with qpopper 4.0 than we used to.)

Usually in my experience it's not just a large mailbox, but some
specific email message in the spool with unusual or malformed headers
which crashes them.  If you can edit the user's mail spool using some
other mail program (while making sure that it doesn't concurrently get
checked with qpopper) and remove the offending message, then usually
the user is able to get their mail and things go forward normally from
then on.

If you can't figure out which is the offending message, try binary
search or "divide and conquer" - make a backup copy of their mailbox,
delete half of the messages, and see if they can download it now; if
so, try them on the other half of the messages (restored from your
backup); if they crash again, delete half of the messages remaining in
that portion of the mailbox, and repeat until you've narrowed it down
to the offending one.  It's a pain but better than just suffering with
the problem indefinitely.

  -- Clifton
 
-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Tue, 4 Dec 2001 23:02:42 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

--mxv5cy4qt+RJ9ypb
Content-Type: text/plain; charset=us-ascii

Randall Gellens on Fri 30/11 15:48 -0800:
> > Based on our past testing, and knowing that some customers leave
> > multiple machines checking POP every few minutes, we're fairly sure
> > that if somebody starts a webmail (or any other) IMAP session on one
> > of those accounts, with qpopper running in server mode, their
> > mailspool will be corrupted in minutes.
> 
> Someone (and I apologize for forgetting who that was) suggested an
> option for Qpopper to hold the spool lock for the duration of the
> session.

Yes that was me, I did end up starting at a patch but then after some
tracing I saw that it was still unlocking the spool in the middle, I
missed something in the locking code...I was running through gdb and
then I got distracted and never finished it.

If you want to take a look at what I had, here you go...if you finish
fixing it please let me know...

> That might be a good way around this problem, assuming IMAPD locks the
> spool.

If I remember right, the UW imapd uses a hitchpost-style dotlock out of
the box and needs to be hacked to use the advisory kernel locks.  It has
been a while, I'm doing different stuff now.

--mxv5cy4qt+RJ9ypb
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="popper-full-session_4.0.3.diff"

--mxv5cy4qt+RJ9ypb--

Date: Tue, 04 Dec 2001 18:07:38 -1000
From: Robert Brewer <rbrewer at lava dot net>
Subject: Re: Proposed solution for qpopper + imapd problem

--On Tuesday, December 4, 2001 10:44 AM -0800 Randall Gellens 
<randy at qualcomm dot com> wrote:

> At 5:42 PM -1000 12/3/01, Robert Brewer wrote:
>
>> Unfortunately, users on dialup that receive large attachments or
>> have particularly noisy phone lines can have quite long POP
>> sessions, longer than one hour.
>
> That could cause problems with local mail delivery, since the spool would
> be locked presumably longer than the specified timeout, causing inbound
> mail to bounce.

Yeah, that's why we don't think locking the spool for the whole POP session 
is a feasible solution.

>>  Even if the POP sessions are short, if they happen frequently
>> enough (like every 2 minutes) the odds are that spools will get
>> corrupted if there is also a long-term UW-IMAP session going.
>
> They wouldn't get corrupted if the spool was kept locked.  However, either
> the POP or the IMAP session would get an error and be unable to proceed
> while the other was active.  The point of locking the spool is to prevent
> simultaneous access.

Yes, but if you keep the spool locked then you have the local MDA timeout 
problem. The solution Clifton mentioned (qpopper and impad checking each 
other's mutex before starting a session) solves both the simultaneous access 
problem and the MDA timeout problem.

Date: Tue, 4 Dec 2001 23:29:56 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

--+xNpyl7Qekk2NvDX
Content-Type: text/plain; charset=us-ascii

Scott McDermott on Tue  4/12 23:02 -0500:
> If you want to take a look at what I had, here you go...if you finish
> fixing it please let me know...

it seems the patch did not make it through.  Strange, let me try again.

--+xNpyl7Qekk2NvDX
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="popper-full-session_4.0.3.diff"

--+xNpyl7Qekk2NvDX--

Date: Wed, 5 Dec 2001 00:01:50 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

Scott McDermott on Tue  4/12 23:29 -0500:
> > If you want to take a look at what I had, here you go...if you
> > finish fixing it please let me know...
> 
> it seems the patch did not make it through.  Strange, let me try
> again.

I think something is eating attachments.  It sure ain't our systems.
Here is the text.

diff -ur qpopper4.0.3/popper/pop_cache.c qpopper4.0.3-local/popper/pop_cache.c
--- qpopper4.0.3/popper/pop_cache.c	Tue Apr  3 20:23:29 2001
+++ qpopper4.0.3-local/popper/pop_cache.c	Wed Jun  6 00:20:47 2001
@@ -367,6 +367,14 @@
         return POP_FAILURE;
     }
 
+    /*
+     * NOTE: below comment is not implemented yet; if the above check
+     * fails we fall out of server mode and cause a full re-parse in
+     * pop_dropcopy().  Otherwise we still use the cache when there
+     * are no changes, which should still give significant performance
+     * advantage for the usual case of frequent checks when there is
+     * no additional mail from the last check.
+     */
 
     /*
      * Now we know that the cache information is probably compatible
diff -ur qpopper4.0.3/popper/pop_config.c qpopper4.0.3-local/popper/pop_config.c
--- qpopper4.0.3/popper/pop_config.c	Fri Jun  1 22:24:33 2001
+++ qpopper4.0.3-local/popper/pop_config.c	Tue Jun  5 15:26:16 2001
@@ -5,6 +5,9 @@
  *
  * Revisions:
  *
+ *     06/04/01 [smcdermott at questra dot com]
+ *             - Added 'full-session-lock' Boolean option.
+ *
  *     06/01/01 [RCG]
  *             - Added 'uw-kludge' as synonym for 'uw-kluge'.
  *
@@ -217,6 +220,7 @@
     kLOG_FACILITY,          /* -y facility      */
     kLOG_LOGIN,             /*    (no flag)     */
     kMAXBULLS,              /*    (no flag)     */
+    kFULL_SESSION_LOCK,     /*    (no flag)     */
 
 
     LAST_OPT_VAL
@@ -248,6 +252,7 @@
     { "downcase-user"                , CfgBool , CfgResUser, kDCASEUSER          },
     { "drac-host"                    , CfgStr  , CfgResNone, kDRACHOST           },
     { "fast-update"                  , CfgBool , CfgResNone, kFASTUPDATE         },
+    { "full-session-lock"            , CfgBool , CfgResUser, kFULL_SESSION_LOCK  },
     { "group-bulletins"              , CfgBool , CfgResUser, kGROUP_BULLS        },
     { "group-no-server-mode"         , CfgStr  , CfgResUser, kGRP_NO_SERV_MODE   },
     { "group-server-mode"            , CfgStr  , CfgResUser, kGRP_SERV_MODE      },
@@ -882,6 +887,7 @@
         case kLOG_FACILITY:        R__MNM ( &p->log_facility );
         case kLOG_LOGIN:           R__PTR ( &p->pLog_login );
         case kMAXBULLS:            R__INT ( &p->nMaxBulls );
+        case kFULL_SESSION_LOCK:   R__BOO ( &p->bFullSessionLock );
 
         default:                   R__PTR ( NULL );
     } /* switch ( item ) */
diff -ur qpopper4.0.3/popper/pop_dropcopy.c qpopper4.0.3-local/popper/pop_dropcopy.c
--- qpopper4.0.3/popper/pop_dropcopy.c	Fri Jun  1 22:24:34 2001
+++ qpopper4.0.3-local/popper/pop_dropcopy.c	Tue Jun  5 17:54:07 2001
@@ -6,6 +6,13 @@
  *
  * Revisions:
  *
+ * 06/05/01  [smcdermott at questra dot com]
+ *         - new option bFullSessionLock that, when set, causes the drop lock
+ *           to continue to be held after exiting pop_dropcopy() (when in
+ *           server mode).  Idea is to surround the whole session with the
+ *           lock up until update completes and avoid the chance of mail spool
+ *           corruption by shell users, while still using server mode.
+ *
  * 03/09/01  [rcg]
  *         - Now including continuation of UIDL headers in UIDL hash.
  *         - Don't include random component of extra headers in UIDL
@@ -1806,7 +1813,7 @@
 
     Qmailunlock ( HERE );
 
-    if ( p->server_mode )
+    if ( p->server_mode && p->bFullSessionLock == FALSE )
         flock ( mfd, LOCK_UN );
 
     if ( p->bDo_timing )
diff -ur qpopper4.0.3/popper/pop_updt.c qpopper4.0.3-local/popper/pop_updt.c
--- qpopper4.0.3/popper/pop_updt.c	Tue Apr  3 20:23:39 2001
+++ qpopper4.0.3-local/popper/pop_updt.c	Tue Jun  5 17:55:35 2001
@@ -5,6 +5,11 @@
  *
  * Revisions:
  *
+ * 01/06/05  [smcdermott at questra dot com]
+ *         - don't try to relock the drop for updating when in server mode and
+ *           p->bFullSessionLock is used (we never dropped the lock in the
+ *           first place)
+ *
  * 01/31/01  [rcg]
  *         -  No longer hiding messages deleted in prior aborted session
  *           when '--disable-update-abort' set.
@@ -381,16 +386,20 @@
     }
 
     /*  
-     * Lock the user's real mail drop 
+     * Lock the user's real mail drop; if we are in server mode and
+     * full-session-lock option has been used, then the lock still exists on
+     * mfd.
      */
-    while ( flock ( mfd, LOCK_EX ) == -1 && retrycnt++ < 4 )
-        sleep ( retrycnt * 5 );
-    if ( retrycnt == 4 ) {
-        fclose ( (p->server_mode) ? p->drop : md );
-        Qmailunlock ( HERE );
-        return pop_msg ( p, POP_FAILURE, HERE, "flock: '%s': %s (%d)", 
-                         p->drop_name,
-                         STRERROR(errno), errno );
+    if (!(p->server_mode == TRUE && p->bFullSessionLock == TRUE)) {
+        while ( flock ( mfd, LOCK_EX ) == -1 && retrycnt++ < 4 )
+            sleep ( retrycnt * 5 );
+        if ( retrycnt == 4 ) {
+            fclose ( (p->server_mode) ? p->drop : md );
+            Qmailunlock ( HERE );
+            return pop_msg ( p, POP_FAILURE, HERE, "flock: '%s': %s (%d)", 
+                             p->drop_name,
+                             STRERROR(errno), errno );
+        }
     }
 
     if ( p->server_mode == FALSE )  {
diff -ur qpopper4.0.3/popper/popper.h qpopper4.0.3-local/popper/popper.h
--- qpopper4.0.3/popper/popper.h	Fri Jun  1 22:24:36 2001
+++ qpopper4.0.3-local/popper/popper.h	Tue Jun  5 20:08:37 2001
@@ -682,6 +682,7 @@
     BOOL               bNo_atomic_open;         /* open() isn't automic. */
     log_facility_type   log_facility;           /* Which log facility to use */
     char               *pLog_login;             /* String to use when logging log-ins */
+    BOOL                bFullSessionLock;       /* lock spool for whole session or just dropcopy and updt */
 };
 
 

Date: Wed, 5 Dec 2001 00:00:38 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

89795908863529931066 at lists.pensive dot org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0.1i
In-Reply-To: <389795908863529931066 at lists.pensive dot org>; from rbrewer at lava dot net on Tue, Dec 04, 2001 at 06:07:38PM -1000

Robert Brewer on Tue  4/12 18:07 -1000:
> Yeah, that's why we don't think locking the spool for the whole POP
> session is a feasible solution.

the MDA should return temporary failure to the MTA, which should then
queue and retry the whole delivery process until the normal postal
expiration.

> Yes, but if you keep the spool locked then you have the local MDA
> timeout problem. The solution Clifton mentioned (qpopper and impad
> checking each other's mutex before starting a session) solves both the
> simultaneous access problem and the MDA timeout problem.

What MTA are you using again? We have qmail and it looks like on
lock wait timeout, it just returns and will be scheduled for another
delivery attempt the same as in the case of the MX host being down or a
similar event.  This shouldn't be a problem...

Date: Wed, 5 Dec 2001 00:13:49 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: random truncation of messages received via ssl by outlook

We tried using 4.0.3 with SSL.  It works fine most of the time.  It
seems every so often a certain .xls file will be truncated upon
reception though, when Outlook is the MUA.  There is no apparent error,
but the file is truncated.  This does not ever happen with Netscape
clients, and it never happens with SSL turned off.  It will always
happen to the same .xls file, but not all .xls files exhibit the
problem.  No other files besides .xls files appear to have this problem,
nor any other MUA than Outlook.

Anyone else see this?

From: "Maciej Uhlig" <muhlig at us.edu dot pl>
Subject: Outlooks and qpopper
Date: Wed, 5 Dec 2001 08:35:33 +0100

My experiences with Outlooks and qpopper are unsuccessful. Because I can see
some notes in the archives written by those who claim to succeed, I'd like
to describe what I did and what I couldn't do and ask for the advice.

My server software is qpopper 4.0.3 running on Solaris (2.6 & 8) with
OpenSSL 0.9.6(b) and ANDIrand random package. My client software are:
Outlook 2000 and Outlook Express 5 (Polish versions both) and Eudora 5.1. My
certificates are self-signed.

Eudora 5.1 is the only MUA which works as expected and docummented. Although
it didn't want to connect for the first time, it told me about untrusted
certificate and started to work when I moved my certificate to trusted ones.

Both Outlooks however don't want to run SSL (both in stls and alternate-port
modes). They show even different errors, which, according to MS support
site, are not related to the circumstances (their advice, for instance: you
run SSL. Don't do it anymore :-) or: you have virus shield running at
exchange server.  stop it immediately :-)).

There might be at least two reasons of failure:

- untrusted certificate - how to make it trusted under Outlook? I even
thought about trial Verisign SSL ID, but I feel it works for Web only (maybe
I'm wrong, but how to install it in Outlook - would it respect Internet
Explorer certificates?)

- other error/misconfiguration - but what exactly, while it runs perfectly
with Eudora?

All comments are welcome :-)

Maciek


Date: Wed, 05 Dec 2001 11:41:09 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: duplicate mails and slow mail

hi

I'm compiling the newest version of qpopper as we speak to handle my
other problem. But now there is another issue.  Before qpopper I used
gnu-pop3d.  The daemon to go into history with the least kind of
documentation on earth and beyond...  We're using sendmail as our smtp
server.  The problem has been there before the installation of qpopper,
so I'm afraid this might be a bit off topic.  But I'm trusting you guys
(knowning much about mail).  The problem is that, we have some employees
here that receive the same mails every day, or mails from the first of
december coming in earlier than mails from the third of december.  Is
this smtp or pop3 related?  (I'm guessing smtp, I checked my queue
directory, and it is empty)  Could this be an error on another mail
server (we're receiving a lot of mails from the same mailserver, which
is another shareholder for this company).

Any ideas would be appreciated.

Best regards

Tom
 
-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

From: Oliver Egginger <Oliver.Egginger at dvz.fh-giessen dot de>
Date: Wed, 5 Dec 2001 12:07:13 +0000
Subject: Re: duplicate mails and slow mail

Remember:
Your users have to tell the pop-server to delete there mails.
Otherwise it could happened that they load the same message serval times.
Also there are often (mild) difficulties when switching from one pop-daemon
to another. 

Rule-of-thumb:
Don't trust your users!

Innocent people often think that they receive to much or insufficient mail.
In the most cases (I have seen) the reason was a bad configured mail client.


regards
Oliver  
 



> hi
>
> I'm compiling the newest version of qpopper as we speak to handle my
> other problem. But now there is another issue.  Before qpopper I used
> gnu-pop3d.  The daemon to go into history with the least kind of
> documentation on earth and beyond...  We're using sendmail as our smtp
> server.  The problem has been there before the installation of qpopper,
> so I'm afraid this might be a bit off topic.  But I'm trusting you guys
> (knowning much about mail).  The problem is that, we have some employees
> here that receive the same mails every day, or mails from the first of
> december coming in earlier than mails from the third of december.  Is
> this smtp or pop3 related?  (I'm guessing smtp, I checked my queue
> directory, and it is empty)  Could this be an error on another mail
> server (we're receiving a lot of mails from the same mailserver, which
> is another shareholder for this company).
>
> Any ideas would be appreciated.
>
> Best regards
>
> Tom

-- 
Oliver Egginger
FH Giessen-Friedberg
DV-Zentrum
Wiesenstrasse 14
35390 Giessen
Tel. +49 641 309-1283
Fax  +49 641 309-2908
Mail: Oliver.Egginger at dvz.fh-giessen dot de


****************************************************
Sprechzeiten des DV-Zentrums fuer 
E-Mail-Angelegenheiten:

Mo	11:30 - 15:30 Uhr
Di	13:15 - 15:30 Uhr
Do	 9:30 - 16:00 Uhr
Fr	 9:45 - 11:45 Uhr
****************************************************

Date: Wed, 05 Dec 2001 12:07:15 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: Re: duplicate mails and slow mail

all pop3 clients are configured correctly... (without "leave msgs on
server" option checked)


Oliver Egginger wrote:
> 
> Remember:
> Your users have to tell the pop-server to delete there mails.
> Otherwise it could happened that they load the same message serval times.
> Also there are often (mild) difficulties when switching from one pop-daemon
> to another.
> 
> Rule-of-thumb:
> Don't trust your users!
> 
> Innocent people often think that they receive to much or insufficient mail.
> In the most cases (I have seen) the reason was a bad configured mail client.
> 
> regards
> Oliver
> 
> 
> > hi
> >
> > I'm compiling the newest version of qpopper as we speak to handle my
> > other problem. But now there is another issue.  Before qpopper I used
> > gnu-pop3d.  The daemon to go into history with the least kind of
> > documentation on earth and beyond...  We're using sendmail as our smtp
> > server.  The problem has been there before the installation of qpopper,
> > so I'm afraid this might be a bit off topic.  But I'm trusting you guys
> > (knowning much about mail).  The problem is that, we have some employees
> > here that receive the same mails every day, or mails from the first of
> > december coming in earlier than mails from the third of december.  Is
> > this smtp or pop3 related?  (I'm guessing smtp, I checked my queue
> > directory, and it is empty)  Could this be an error on another mail
> > server (we're receiving a lot of mails from the same mailserver, which
> > is another shareholder for this company).
> >
> > Any ideas would be appreciated.
> >
> > Best regards
> >
> > Tom
> 
> --
> Oliver Egginger
> FH Giessen-Friedberg
> DV-Zentrum
> Wiesenstrasse 14
> 35390 Giessen
> Tel. +49 641 309-1283
> Fax  +49 641 309-2908
> Mail: Oliver.Egginger at dvz.fh-giessen dot de
> 
> ****************************************************
> Sprechzeiten des DV-Zentrums fuer
> E-Mail-Angelegenheiten:
> 
> Mo      11:30 - 15:30 Uhr
> Di      13:15 - 15:30 Uhr
> Do       9:30 - 16:00 Uhr
> Fr       9:45 - 11:45 Uhr
> ****************************************************

-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Date: Wed, 05 Dec 2001 18:16:39 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: outlook/entourage qpopper problem

Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
the same problem :-/

Now I compiled in debugging, and this is what syslog gave me:

Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
permitted (1) [pop_send.c:685]

Microsoft Entourage and Outlook still crash while trying to collect the
mail...

HELP please...



-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Last updated on 5 Dec 2001 by Pensive Mailing List Admin