The qpopper list archive ending on 20 Dec 2001


Topics covered in this issue include:

  1. Re: duplicate mails and slow mail
       Gregory Hicks <ghicks at cadence dot com>
       Wed, 5 Dec 2001 09:29:21 -0800 (PST)
  2. Re: outlook/entourage qpopper problem
       Daniel Senie <dts at senie dot com>
       Wed, 05 Dec 2001 12:36:24 -0500
  3. Re: outlook/entourage qpopper problem
       Daniel Senie <dts at senie dot com>
       Wed, 05 Dec 2001 13:13:53 -0500
  4. mailing list eats attachments (was Re: Proposed solution for qpopper + imapd problem)
       Scott McDermott <mcdermot at questra dot com>
       Wed, 5 Dec 2001 13:08:45 -0500
  5. Re: outlook/entourage qpopper problem
       Clifton Royston <cliftonr at lava dot net>
       Wed, 5 Dec 2001 08:16:45 -1000
  6. please ignore/delete this message (testing mailing list)
       Scott McDermott <mcdermot at questra dot com>
       Wed, 5 Dec 2001 14:00:25 -0500
  7. Re: outlook/entourage qpopper problem
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Wed, 05 Dec 2001 19:19:22 +0100
  8. Re: mailing list eats attachments (was Re: Proposed solution
       Daniel Senie <dts at senie dot com>
       Wed, 05 Dec 2001 14:14:22 -0500
  9. Re: outlook/entourage qpopper problem
       Daniel Senie <dts at senie dot com>
       Wed, 05 Dec 2001 14:17:59 -0500
 10. Re: Proposed solution for qpopper + imapd problem
       Randall Gellens <randy at qualcomm dot com>
       Wed, 5 Dec 2001 09:59:59 -0800
 11. Re: mailing list eats attachments
       "Kenneth Porter" <shiva at well dot com>
       Wed, 05 Dec 2001 11:33:09 -0800
 12. Re: outlook/entourage qpopper problem
       Tom Van de Wiele <tom.vandewiele at eduline dot be>
       Wed, 05 Dec 2001 19:11:09 +0100
 13. unscribe
       Joy Newland <joyn at ndtel dot com>
       Wed, 05 Dec 2001 14:00:33 -0600
 14. Re: duplicate mails and slow mail
       Randall Gellens <randy at qualcomm dot com>
       Wed, 5 Dec 2001 14:33:25 -0800
 15. Re: outlook/entourage qpopper problem
       Randall Gellens <randy at qualcomm dot com>
       Wed, 5 Dec 2001 14:38:48 -0800
 16. Qpopper on Tech Republic
       "Kenneth Porter" <shiva at well dot com>
       Wed, 05 Dec 2001 12:20:15 -0800
 17. Re: mailing list eats attachments (was Re: Proposed solution 
       Randall Gellens <randy at qualcomm dot com>
       Wed, 5 Dec 2001 14:36:14 -0800
 18. qpopper & qmail -ERR[AUTH]
       Darwin Mecham <darwin at insei dot com>
       Thu, 6 Dec 2001 12:29:56 -0700
 19. problem using qpopper+mysql
       "Hubert Denkmair" <hubert at denkmair dot de>
       Tue, 11 Dec 2001 00:41:38 +0100
 20. IO and SSL errors
       Shane Williams <broot at gslis.utexas dot edu>
       Tue, 11 Dec 2001 09:09:28 -0600 (CST)
 21. sendmail blooking
       "Mohamed Aly" <maly at rite dot com>
       Wed, 12 Dec 2001 22:16:58 +0200
 22. Re: sendmail blooking
       peter.allen at moon-light.co dot uk
       Wed, 12 Dec 2001 11:02:33 +0000
 23. Re: sendmail blooking
       peter.allen at moon-light.co dot uk
       Wed, 12 Dec 2001 20:14:34 +0000
 24. Re: qpopper & qmail -ERR[AUTH]
       Randall Gellens <randy at qualcomm dot com>
       Wed, 12 Dec 2001 13:47:40 -0700
 25. Re: IO and SSL errors
       Randall Gellens <randy at qualcomm dot com>
       Wed, 12 Dec 2001 13:52:38 -0700
 26. Re: sendmail blooking
       "Kenneth Porter" <shiva at well dot com>
       Wed, 12 Dec 2001 14:03:54 -0800
 27. Re: sendmail blooking
       Michael Kolos <michael at colba dot net>
       Wed, 12 Dec 2001 17:22:51 -0500
 28. QPopper Optimizations with IMAP
       Erik Kangas <kangas at InfiniteDimensions dot com>
       Wed, 12 Dec 2001 21:03:47 -0500 (EST)
 29. RE: sendmail blooking
       "Peter Santiago" <petersantiago at bigfoot dot com>
       Thu, 13 Dec 2001 12:40:01 +0800
 30. Message repeating !!! AW: sendmail blooking
       =?us-ascii?Q?Christian_Gnagi?= <cg at gnasch dot ch>
       Thu, 13 Dec 2001 09:58:41 +0100
 31. Re: sendmail blooking
       The Doctor <doctor at doctor.nl2k.ab dot ca>
       Thu, 13 Dec 2001 06:59:51 -0700
 32. Re: sendmail blooking
       Jesus Cea Avion <jcea at argo dot es>
       Thu, 13 Dec 2001 12:11:41 +0100
 33. REMOVE
       "John MacKenzie - Elehost" <john at elehost dot com>
       Thu, 13 Dec 2001 13:08:19 -0500
 34. OpenBSD qpopper4.0.3 fails
       "J.D. Bronson" <lists at xpec dot com>
       Sun, 16 Dec 2001 08:53:56 -0600
 35. Re: OpenBSD qpopper4.0.3 fails
       "J.D. Bronson" <lists at xpec dot com>
       Sun, 16 Dec 2001 09:33:32 -0600
 36. Re: OpenBSD qpopper4.0.3 fails 
       Ted Cabeen <ted at impulse dot net>
       Mon, 17 Dec 2001 10:35:11 -0800
 37. Re: REMOVE
       "Kenneth Porter" <shiva at well dot com>
       Mon, 17 Dec 2001 18:39:03 -0800
 38. force clean mail after reading for specific users?
       PM WONG <pmwong at power25t.hkbu.edu dot hk>
       Wed, 19 Dec 2001 09:36:22 +0800 (HKT)
 39. Mail for Virtual Domains.
       "Mark-Nathaniel Weisman" <mweisman at gci dot net>
       Tue, 18 Dec 2001 23:04:58 -0900
 40. Re: QPopper Optimizations with IMAP
       Scott McDermott <mcdermot at questra dot com>
       Wed, 19 Dec 2001 12:08:48 -0500
 41. Question: send mail password authentication
       Thomas Walter <tbw at geo.hunter.cuny dot edu>
       Wed, 19 Dec 2001 12:59:43 -0500 (EST)
 42. Re: Question: send mail password authentication
       Chip Old <fold at bcpl dot net>
       Wed, 19 Dec 2001 15:22:02 -0500 (EST)
 43. Re: OpenBSD qpopper4.0.3 fails
       Chuck Yerkes <chuck+qpopper at yerkes dot com>
       Wed, 19 Dec 2001 12:54:51 -0800
 44. log-login string from sample/qpopper.config is not working
       "Bernd Prager" <bprager at iamerica dot net>
       Wed, 19 Dec 2001 21:11:26 -0500
 45. Re: force clean mail after reading for specific users?
       Stephen Mawdsley <stephen at altanet dot com>
       Wed, 19 Dec 2001 19:20:47 -0700
 46. Re: OpenBSD qpopper4.0.3 fails
       Randall Gellens <randy at qualcomm dot com>
       Wed, 19 Dec 2001 23:04:41 -0500
 47. Re: OpenBSD qpopper4.0.3 fails
       Randall Gellens <randy at qualcomm dot com>
       Wed, 19 Dec 2001 23:08:56 -0500
 48. openssl on AIX?
       Tim Tyler <tyler at beloit dot edu>
       Thu, 20 Dec 2001 13:52:54 -0600
 49. BLOCK_UID?
       Daniel Senie <dts at senie dot com>
       Thu, 20 Dec 2001 15:41:36 -0500
 50. Qpopper loch mechanism
       Mark <admin at asarian-host dot net>
       Thu, 20 Dec 2001 23:10:03 +0100

Date: Wed, 5 Dec 2001 09:29:21 -0800 (PST)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: duplicate mails and slow mail

I'm guessing that the problem is external to your company given that
your queues are empty.

I'd check the "Received: " headers for date/time consistancy.  Start at
the first one.  Towards the end of the line is a date-time group.
Check this date with the next line.  Perhaps only a few seconds
difference.  So check the next one.  A few more seconds?  OK.  check
the next one...  Eventually, you probably will find one that is way
off...

However, you also have to take into account time-zones... One hour off
but coming from a mountain states ISP? OK...

Is the message coming from a PC that is off line when the message was
composed?  The "Date: " line is composed when the message is queued for
delivery.

Just some thoughts...

Regards,
Gregory Hicks

> Date: Wed, 05 Dec 2001 11:41:09 +0100
> From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
> 
> I'm compiling the newest version of qpopper as we speak to handle my
> other problem. But now there is another issue.  Before qpopper I used
> gnu-pop3d.  The daemon to go into history with the least kind of
> documentation on earth and beyond...  We're using sendmail as our smtp
> server.  The problem has been there before the installation of qpopper,
> so I'm afraid this might be a bit off topic.  But I'm trusting you guys
> (knowning much about mail).  The problem is that, we have some employees
> here that receive the same mails every day, or mails from the first of
> december coming in earlier than mails from the third of december.  Is
> this smtp or pop3 related?  (I'm guessing smtp, I checked my queue
> directory, and it is empty)  Could this be an error on another mail
> server (we're receiving a lot of mails from the same mailserver, which
> is another shareholder for this company).
> 
> Any ideas would be appreciated.
> 
> Best regards
> 
> Tom
>  
> -- 
> Tom Van de Wiele
> System Administrator
> 
> Eduline 
> Colonel Bourgstraat 105a
> 1140 Brussel
> http://www.eduline.be

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

"The trouble with doing anything right the first time is that nobody
appreciates how difficult it was."

When a team of dedicated individuals makes a commitment to act as
one...  the sky's the limit.


Date: Wed, 05 Dec 2001 12:36:24 -0500
From: Daniel Senie <dts at senie dot com>
Subject: Re: outlook/entourage qpopper problem

At 12:16 PM 12/5/01, Tom Van de Wiele wrote:
>Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
>the same problem :-/
>
>Now I compiled in debugging, and this is what syslog gave me:
>
>Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
>client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
>permitted (1) [pop_send.c:685]

Someone (presumably the client) closed the TCP session before qpopper had 
finished sending data to it.

>Microsoft Entourage and Outlook still crash while trying to collect the
>mail...

If by the term 'crash' you mean the program truly stopped, and Windows told 
you the program executed an illegal instruction or some such, take that up 
with Microsoft. If you mean there was an error displayed by Outlook, then 
what you're talking about is NOT a crash.

-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


Date: Wed, 05 Dec 2001 13:13:53 -0500
From: Daniel Senie <dts at senie dot com>
Subject: Re: outlook/entourage qpopper problem

At 01:11 PM 12/5/01, Tom Van de Wiele wrote:
>The person was unable to work and the mails were piling up... I had to
>clear the mailbox...
>
>so the problem remains :(

I'll try to help, but you really need to answer some questions...

You said something crashed. WHAT CRASHED?

You have not told us what you're running for a config, most especially for 
TLS issues. Please provide enough information for folks to help you.



>Daniel Senie wrote:
> >
> > At 12:16 PM 12/5/01, Tom Van de Wiele wrote:
> > >Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
> > >the same problem :-/
> > >
> > >Now I compiled in debugging, and this is what syslog gave me:
> > >
> > >Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
> > >client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
> > >permitted (1) [pop_send.c:685]
> >
> > Someone (presumably the client) closed the TCP session before qpopper had
> > finished sending data to it.
> >
> > >Microsoft Entourage and Outlook still crash while trying to collect the
> > >mail...
> >
> > If by the term 'crash' you mean the program truly stopped, and Windows told
> > you the program executed an illegal instruction or some such, take that up
> > with Microsoft. If you mean there was an error displayed by Outlook, then
> > what you're talking about is NOT a crash.
> >
> > -----------------------------------------------------------------
> > Daniel Senie                                        dts at senie dot com
> > Amaranth Networks Inc.                    http://www.amaranth.com
>
>--
>Tom Van de Wiele
>System Administrator
>
>Eduline
>Colonel Bourgstraat 105a
>1140 Brussel
>http://www.eduline.be

-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


Date: Wed, 5 Dec 2001 13:08:45 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: mailing list eats attachments (was Re: Proposed solution for qpopper + imapd problem)

Randall Gellens on Wed  5/12 09:59 -0800:
> >  I think something is eating attachments.  It sure ain't our systems.
> 
> The list software does that to block nasty things.

seems like if you only allow mail from list members you wouldn't need
this...I suppose it protects against errors though...You could have a
max attach size too of something reasonable...

it's just unexpected is all, no matter I suppose, but if I hadn't read
the list mail I would never have noticed that my attachment wasn't
posted.

Date: Wed, 5 Dec 2001 08:16:45 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: outlook/entourage qpopper problem

On Wed, Dec 05, 2001 at 06:16:39PM +0100, Tom Van de Wiele wrote:
> Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
> the same problem :-/
> 
> Now I compiled in debugging, and this is what syslog gave me:
> 
> Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
> client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
> permitted (1) [pop_send.c:685]
> 
> Microsoft Entourage and Outlook still crash while trying to collect the
> mail...

  I didn't say it would stop them from crashing.  They're buggy programs.

  What *should* have improved is that now they should not be locked out
of the spool file for several minutes as a result.  That "I/O error"
message above indicated that qpopper now detects that the client has
gone away so that the mail spool should be back in place immediately.

> HELP please...

  You'll still need to track it down to what message or messages in the
mailbox cause them to crash; I would start by looking for viruses or
for spam messages with large attachments and deleting those.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Wed, 5 Dec 2001 14:00:25 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: please ignore/delete this message (testing mailing list)

please ignore/delete this message

The mailing list seems to be breaking apart my headers and inserting
corruption, I'm testing if it happens again...

Date: Wed, 05 Dec 2001 19:19:22 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: Re: outlook/entourage qpopper problem

it still locks out the spool file for a few mins...

I'm calling it a day, I'll send a mail tomorrow providing you guys with
detailed info




Clifton Royston wrote:
> 
> On Wed, Dec 05, 2001 at 06:16:39PM +0100, Tom Van de Wiele wrote:
> > Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
> > the same problem :-/
> >
> > Now I compiled in debugging, and this is what syslog gave me:
> >
> > Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
> > client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
> > permitted (1) [pop_send.c:685]
> >
> > Microsoft Entourage and Outlook still crash while trying to collect the
> > mail...
> 
>   I didn't say it would stop them from crashing.  They're buggy programs.
> 
>   What *should* have improved is that now they should not be locked out
> of the spool file for several minutes as a result.  That "I/O error"
> message above indicated that qpopper now detects that the client has
> gone away so that the mail spool should be back in place immediately.
> 
> > HELP please...
> 
>   You'll still need to track it down to what message or messages in the
> mailbox cause them to crash; I would start by looking for viruses or
> for spam messages with large attachments and deleting those.
> 
>   -- Clifton
> 
> --
>  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
>    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Date: Wed, 05 Dec 2001 14:14:22 -0500
From: Daniel Senie <dts at senie dot com>
Subject: Re: mailing list eats attachments (was Re: Proposed solution

At 01:08 PM 12/5/01, Scott McDermott wrote:
>.5]>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>X-Mailer: Mutt 1.0.1i
>In-Reply-To: <p05100300b834110a8a5f at [192.168.1 dot 5]>; from 
>randy at qualcomm dot com on Wed, Dec 05, 2001 at 09:59:59AM -0800
>
>Randall Gellens on Wed  5/12 09:59 -0800:
> > >  I think something is eating attachments.  It sure ain't our systems.
> >
> > The list software does that to block nasty things.
>
>seems like if you only allow mail from list members you wouldn't need
>this...I suppose it protects against errors though...You could have a
>max attach size too of something reasonable...

Thanks to the latest worm programs, it's necessary to block attachments 
even from subscribers. Unfortunate...

I saw one of the diffs come through in one of the emails yesterday, though 
QuickTime claimed it owned the file type.

Best bet is to push stuff into ascii text and just put it in the body... 
safer for everyone.

-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


Date: Wed, 05 Dec 2001 14:17:59 -0500
From: Daniel Senie <dts at senie dot com>
Subject: Re: outlook/entourage qpopper problem

At 01:16 PM 12/5/01, Clifton Royston wrote:
>On Wed, Dec 05, 2001 at 06:16:39PM +0100, Tom Van de Wiele wrote:
> > Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
> > the same problem :-/
> >
> > Now I compiled in debugging, and this is what syslog gave me:
> >
> > Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
> > client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
> > permitted (1) [pop_send.c:685]
> >
> > Microsoft Entourage and Outlook still crash while trying to collect the
> > mail...
>
>   I didn't say it would stop them from crashing.  They're buggy programs.
>
>   What *should* have improved is that now they should not be locked out
>of the spool file for several minutes as a result.  That "I/O error"
>message above indicated that qpopper now detects that the client has
>gone away so that the mail spool should be back in place immediately.

There's code in the next release of qpopper to give up more quickly when 
detecting the TCP session has been terminated by the other end, which 
should help some. I've been running with those mods for a while.

> > HELP please...
>
>   You'll still need to track it down to what message or messages in the
>mailbox cause them to crash; I would start by looking for viruses or
>for spam messages with large attachments and deleting those.

It would appear the problems are between Microsoft and the email, and the 
only issue with qpopper is in how quickly it releases the mail spool after 
a client program croaks.

I'd say Microsoft is probably the proper place to go for support. Perhaps a 
newer version will fix the problem (though it'll doubtless introduce others).
-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


Date: Wed, 5 Dec 2001 09:59:59 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Proposed solution for qpopper + imapd problem

At 12:01 AM -0500 12/5/01, Scott McDermott wrote:

>  I think something is eating attachments.  It sure ain't our systems.

The list software does that to block nasty things.

From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 05 Dec 2001 11:33:09 -0800
Subject: Re: mailing list eats attachments

On Wed, 5 Dec 2001 13:08:45 -0500, Scott McDermott wrote:

>seems like if you only allow mail from list members you wouldn't need
>this...I suppose it protects against errors though...You could have a
>max attach size too of something reasonable...

I prefer NOT to see attachments on a mailing list. The bulk of
subscribers won't need to look at it, so it's a waste of bandwidth.
Better to send it direct to those requesting it, or post it on a web or
FTP site for download by those who want it.

If it's a small text-only patch comparable to the size of mail headers,
then just post it inline.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Wed, 05 Dec 2001 19:11:09 +0100
From: Tom Van de Wiele <tom.vandewiele at eduline dot be>
Subject: Re: outlook/entourage qpopper problem

The person was unable to work and the mails were piling up... I had to
clear the mailbox...

so the problem remains :(


Daniel Senie wrote:
> 
> At 12:16 PM 12/5/01, Tom Van de Wiele wrote:
> >Okay, so I downloaded, installed and ran qpopper 4.0.3.  But it gives me
> >the same problem :-/
> >
> >Now I compiled in debugging, and this is what syslog gave me:
> >
> >Dec 5 18:09:53 alexandria popper[13612]: I/O error flushing output to
> >client pascale.fr at 192.168.1.20 [192.168.1.20]: Operation not
> >permitted (1) [pop_send.c:685]
> 
> Someone (presumably the client) closed the TCP session before qpopper had
> finished sending data to it.
> 
> >Microsoft Entourage and Outlook still crash while trying to collect the
> >mail...
> 
> If by the term 'crash' you mean the program truly stopped, and Windows told
> you the program executed an illegal instruction or some such, take that up
> with Microsoft. If you mean there was an error displayed by Outlook, then
> what you're talking about is NOT a crash.
> 
> -----------------------------------------------------------------
> Daniel Senie                                        dts at senie dot com
> Amaranth Networks Inc.                    http://www.amaranth.com

-- 
Tom Van de Wiele
System Administrator

Eduline 
Colonel Bourgstraat 105a
1140 Brussel
http://www.eduline.be

Date: Wed, 05 Dec 2001 14:00:33 -0600
From: Joy Newland <joyn at ndtel dot com>
Subject: unscribe

Please take me off of your mailing list





Date: Wed, 5 Dec 2001 14:33:25 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: duplicate mails and slow mail

At 11:41 AM +0100 12/5/01, Tom Van de Wiele wrote:

>The problem is that, we have some employees
>here that receive the same mails every day, or mails from the first of
>december coming in earlier than mails from the third of december.  Is
>this smtp or pop3 related?

Check the 'Received:' headers of the messages, to see what times they 
were processed by your SMTP server.  Also check them (and the 
'Message-ID:' header) to see if the messages were sent separately or 
were duplicated en-route.
-- 

Date: Wed, 5 Dec 2001 14:38:48 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: outlook/entourage qpopper problem

At 7:11 PM +0100 12/5/01, Tom Van de Wiele wrote:

>The person was unable to work and the mails were piling up... I had to
>clear the mailbox...

Why not try a different client, such as Eudora or one of the others?
-- 

From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 05 Dec 2001 12:20:15 -0800
Subject: Qpopper on Tech Republic

There's a 2-page article on installing Qpopper on today's Tech
Republic, an online IT resource site:

http://www.techrepublic.com/

The article is titled "Set up a POP3 server on Linux with Qpopper".

You may need to register to read the article.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Wed, 5 Dec 2001 14:36:14 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: mailing list eats attachments (was Re: Proposed solution

At 2:14 PM -0500 12/5/01, Daniel Senie wrote:

>Best bet is to push stuff into ascii text and just put it in the 
>body... safer for everyone.

Even better: post the attachment on an FTP site and include the URL 
in your email.  Smaller messages for everyone, easy access to the 
file for those who want it.

-- 

From: Darwin Mecham <darwin at insei dot com>
Subject: qpopper & qmail -ERR[AUTH]
Date: Thu, 6 Dec 2001 12:29:56 -0700

Hi - I'm new to qmail and qpop (done sendmail for a while)

I get the following entries in /var/logs/maillog

Dec  6 14:12:03 tugger popper[30808]: apop "username"
Dec  6 14:12:03 tugger popper[30808]: username at 
zzz.erprises.com (63.xxx.xxx.xxx): -ERR [AUTH] not authenticated
Dec  6 14:12:05 tugger popper[30874]: Stats: username 0 0 0 0 
zzz.erprises.com 63.xxx.xxx.xxx

I'm particularly interested in the "-ERR[AUTH] not authenticated"
part of this entry.

qpop was configured with the following:
./configure --enable-debugging --enable-specialauth --enable-standalone 
--enable-home-dir-mail=Mailbox

So that it would read the shadow password file, run standalone, and use the 
qmail ~./Mailbox directory structure.

Where have I gone wrong???

Thanks ~ Darwin
darwin at insei dot com

From: "Hubert Denkmair" <hubert at denkmair dot de>
Subject: problem using qpopper+mysql
Date: Tue, 11 Dec 2001 00:41:38 +0100

Hello,

I have to move a mail server to a new linux box
and I'm having real trouble now:

First I wanted to install the latest qpopper-4.0.3
which works perfectly as long as I don't activate
the mysql-patch I found.

As soon as I compile with the --enable-mysql
switch qpopper just quits after the connection
has been established by inetd.
I can't seem to get any debugging message
(yes, i tried to compile with --enable-debugging).

When I try to connect using telnet it looks like that:

/usr/lib # telnet linuxbox pop3
Trying aaa.bbb.ccc.ddd...
Connected to linuxbox.
Escape character is '^]'.
Connection closed by foreign host.
/usr/lib #


So I tried to use the very same qpopper/mysql-version
that I used on the old box (qpopper3.1.2 + exim-qpopper-mysql-0.11.2)
and I find the very same problem :(

what's going wrong?
help, anybody?

Hubert
hubert at denkmair dot de


Date: Tue, 11 Dec 2001 09:09:28 -0600 (CST)
From: Shane Williams <broot at gslis.utexas dot edu>
Subject: IO and SSL errors

I have qpopper 4.0.3 running from inetd on an alternate port and using
OpenSSL.  Some users seem to be able to connect fine, but others are
having intermittent problems.  One in particular is using the latest
Eudora, and sometimes when she tries to get mail I see a string of
errors in the logs.  For instance:

Dec 11 07:56:14 fiat qpopper[30455]: (v4.0.3) TLSv1/SSLv3 handshake
with client at dial-xx-xx.ots.utexas.edu (128.83.xx.xx); new
session-id; cipher:DES-CBC3-SHA (DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA
Enc=ES(168) Mac=SHA1), 168 bits
Dec 11 07:56:15 fiat qpopper[30455]: (v4.0.3) POP login by user
"someone" at (dial-xx-xx.ots.utexas.edu) 128.83.xx.xx
Dec 11 08:05:09 fiat qpopper[30455]: I/O Error
Dec 11 08:05:09 fiat qpopper[30455]: Error writing to client
Dec 11 08:05:09 fiat qpopper[30455]: someone at
dial-xx-xx.ots.utexas.edu (128.83.xx.xx): -ERR SIGHUP or SIGPIPE
flagged
Dec 11 08:05:09 fiat qpopper[30455]: OpenSSL Error during write
Dec 11 08:05:09 fiat qpopper[30455]: ...SSL error: error:1409F07F:SSL
routines:SSL3_WRITE_PENDING:bad write retry
Dec 11 08:05:09 fiat qpopper[30455]: Error writing to client
Dec 11 08:05:09 fiat qpopper[30455]: someone at
dial-xx-xx.ots.utexas.edu (128.83.xx.xx): -ERR POP hangup from
fiat.gslis.utexas.edu
Dec 11 08:05:09 fiat qpopper[30455]: OpenSSL Error during write
Dec 11 08:05:09 fiat qpopper[30455]: ...SSL error: error:1409F07F:SSL
routines:SSL3_WRITE_PENDING:bad write retry
Dec 11 08:05:09 fiat qpopper[30455]: Error writing to client
Dec 11 08:05:09 fiat qpopper[30455]: Stats: someone 0 0 27 3898866
dial-xx-xx.ots.utexas.edu 128.83.xx.xx
Dec 11 08:05:09 fiat qpopper[30455]: OpenSSL Error during write
Dec 11 08:05:09 fiat qpopper[30455]: ...SSL error: error:1409F07F:SSL
routines:SSL3_WRITE_PENDING:bad write retry
Dec 11 08:05:09 fiat qpopper[30455]: Error writing to client

So a TLS login seems to go OK, but then almost 10 minutes later,
there's an IO error.

Now, looking at the FAQ, I suspect this may be solved by changing the
chunky write option, but the FAQ suggests  setting it to TLS.  Since
my problem occured while using TLS, I've changed it to never.

So, the questions are: 1. Is this a network congestion problem or
something else?  and 2. Is setting chunky-writes to never a good idea
or am I inviting other problems by doing this?

Thanks for any insight, and feel free to ask for more info if that
would help.

-- 
Public key #7BBC68D9 at            |                 Shane Williams
http://pgp.mit.edu/                | Systems Administrator UT-GSLIS
=----------------------------------+-------------------------------
All syllogisms contain three lines |         broot at gslis.utexas dot edu
Therefore this is not a syllogism  |   www.gslis.utexas.edu/~shanew


From: "Mohamed Aly" <maly at rite dot com>
Subject: sendmail blooking
Date: Wed, 12 Dec 2001 22:16:58 +0200

This is a multi-part message in MIME format.

------=_NextPart_000_001D_01C1835A.B75F83B0
Content-Type: text/plain;
	charset="windows-1256"
Content-Transfer-Encoding: quoted-printable

this question is not for qpopper its for sendmail . but i know most of 
us using sendmail.

I have someone sending thousands of emails to one of my clients with 
some mail bomber programs . so how can i stop or blook this kind of 
attack on the mail boxes but it must be server side solution. 
any help?
thank you 

------=_NextPart_000_001D_01C1835A.B75F83B0
Content-Type: text/html;
	charset="windows-1256"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; 
charset=windows-1256">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>this question is not for qpopper its 
for sendmail . 
but i know most of us using sendmail.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>I have someone sending 
thousands&nbsp;of emails to 
one of my clients with some mail bomber programs . so how can i stop or 
blook 
this kind of attack on the mail boxes but it must be server 
side&nbsp;solution.&nbsp;</FONT></DIV>
<DIV><FONT face=Arial size=2>any help?</FONT></DIV>
<DIV><FONT face=Arial size=2>thank you </FONT></DIV></BODY></HTML>

------=_NextPart_000_001D_01C1835A.B75F83B0--


Date: Wed, 12 Dec 2001 11:02:33 +0000
From: peter.allen at moon-light.co dot uk
Subject: Re: sendmail blooking

--=====================_166035629==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed


Well not all of us are using sendmail, but any way...

You haven't provided much information on the attack, so not all suggestions 
may be valid.

1)  Block, temporarily or permanently depending on the importance to you of 
sending mail server, the source IP number(s) at your border router or 
firewall.

2)  I'm not sure whether sendmail is running from inetd, but DON'T block as 
in 1) with tcp wrappers as your inetd will probably start looping and 
failing if you do.

3)  Provide as much data as you can to the ISP sending the mail to you and 
ask that they assist in stopping it asap.

4)  As above but with your upstream provider, to stop it arriving to you.

5)  See if you can track down the open relay server and attempt to get its 
maintainers to close it.

6)  You could investigate whether, like qmail, sendmail has a badmailfrom 
option to reject messages, based on sender's name.  However the places at 
1) are arguably better for dealing with the workload.

HTH and good luck.

Peter


At 22:16 12/12/01 +0200, Mohamed Aly wrote:
>this question is not for qpopper its for sendmail . but i know most of us 
>using sendmail.
>
>I have someone sending thousands of emails to one of my clients with some 
>mail bomber programs . so how can i stop or blook this kind of attack on 
>the mail boxes but it must be server side solution.
>any help?
>thank you


--=====================_166035629==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
<br>
Well not all of us are using sendmail, but any way...&nbsp; <br><br>
You haven't provided much information on the attack, so not all
suggestions may be valid.&nbsp; <br><br>
1)&nbsp; Block, temporarily or permanently depending on the importance to
you of sending mail server, the source IP number(s) at your border router
or firewall.&nbsp; <br><br>
2)&nbsp; I'm not sure whether sendmail is running from inetd, but DON'T
block as in 1) with tcp wrappers as your inetd will probably start
looping and failing if you do.&nbsp; <br><br>
3)&nbsp; Provide as much data as you can to the ISP sending the mail to
you and ask that they assist in stopping it asap.&nbsp; <br><br>
4)&nbsp; As above but with your upstream provider, to stop it arriving to
you.&nbsp; <br><br>
5)&nbsp; See if you can track down the open relay server and attempt to
get its maintainers to close it.&nbsp; <br><br>
6)&nbsp; You could investigate whether, like qmail, sendmail has a
badmailfrom option to reject messages, based on sender's name.&nbsp;
However the places at 1) are arguably better for dealing with the
workload.&nbsp; <br><br>
HTH and good luck.&nbsp; <br><br>
Peter<br><br>
<br>
At 22:16 12/12/01 +0200, Mohamed Aly wrote:<br>
<blockquote type=cite class=cite cite><font face="arial" size=2>this
question is not for qpopper its for sendmail . but i know most of us
using sendmail.</font><br>
&nbsp;<br>
<font face="arial" size=2>I have someone sending thousands of emails to
one of my clients with some mail bomber programs . so how can i stop or
blook this kind of attack on the mail boxes but it must be server side
solution. </font><br>
<font face="arial" size=2>any help?</font><br>
<font face="arial" size=2>thank you </font></blockquote><br>
</html>

--=====================_166035629==_.ALT--


Date: Wed, 12 Dec 2001 20:14:34 +0000
From: peter.allen at moon-light.co dot uk
Subject: Re: sendmail blooking


Apologies to you and all, but I am not sending the original message 
repeatedly, just once.

Having been alerted to this, I have already requested that the listmaster 
sort this out as the problem seems to be at their end.  (I for one have not 
received the message at all for example, whilst others have received over 
10...)

This is of course particularly ironic since I was giving advice on how to 
deal with excessive e-mails !!

Peter


At 15:08 12/12/01 -0500, you wrote:
>Hi, your message below is being sent repeatedly (at least 10x
>so far) to the Qpopper list.  It could be the mailing list going
>hyper, but i figured i'd mention it to you in case it was
>something on your end.
>
>Regards,
>-Matt
>
>----- Original Message -----
>From: <peter.allen at moon-light.co dot uk>
>To: "Mohamed Aly" <maly at rite dot com>; "Subscribers of Qpopper" 
><qpopper at lists.pensive dot org>
>Sent: Wednesday, December 12, 2001 06:02
>Subject: Re: sendmail blooking
>
>
> >
> > Well not all of us are using sendmail, but any way...
> >
> > You haven't provided much information on the attack, so not all 
> suggestions
> > may be valid.
> >
> > 1)  Block, temporarily or permanently depending on the importance to 
> you of
> > sending mail server, the source IP number(s) at your border router or
> > firewall.
> >
> > 2)  I'm not sure whether sendmail is running from inetd, but DON'T 
> block as
> > in 1) with tcp wrappers as your inetd will probably start looping and
> > failing if you do.
> >
> > 3)  Provide as much data as you can to the ISP sending the mail to you and
> > ask that they assist in stopping it asap.
> >
> > 4)  As above but with your upstream provider, to stop it arriving to you.
> >
> > 5)  See if you can track down the open relay server and attempt to get its
> > maintainers to close it.
> >
> > 6)  You could investigate whether, like qmail, sendmail has a badmailfrom
> > option to reject messages, based on sender's name.  However the places at
> > 1) are arguably better for dealing with the workload.
> >
> > HTH and good luck.
> >
> > Peter
> >
> >
> > At 22:16 12/12/01 +0200, Mohamed Aly wrote:
> > >this question is not for qpopper its for sendmail . but i know most of us
> > >using sendmail.
> > >
> > >I have someone sending thousands of emails to one of my clients with some
> > >mail bomber programs . so how can i stop or blook this kind of attack on
> > >the mail boxes but it must be server side solution.
> > >any help?
> > >thank you
> >
> >



Date: Wed, 12 Dec 2001 13:47:40 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: qpopper & qmail -ERR[AUTH]

At 12:29 PM -0700 12/6/01, Darwin Mecham wrote:

>  Dec  6 14:12:03 tugger popper[30808]: apop "username"
>  Dec  6 14:12:03 tugger popper[30808]: username at
>  zzz.erprises.com (63.xxx.xxx.xxx): -ERR [AUTH] not authenticated
>
>  I'm particularly interested in the "-ERR[AUTH] not authenticated"
>  part of this entry.

Can other users authenticate with APOP, or do they all have trouble? 
Can this user authenticate with a different client (but also using 
APOP)?  Have you tried resetting the APOP password?

Date: Wed, 12 Dec 2001 13:52:38 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: IO and SSL errors

At 9:09 AM -0600 12/11/01, Shane Williams wrote:

>  So a TLS login seems to go OK, but then almost 10 minutes later,
>  there's an IO error.

You can try enabling debugging in the client, to see if that helps. 
Or try a packet trace if you can reproduce it.  You can also try 
increasing the client timeout, as a test.

>
>  Now, looking at the FAQ, I suspect this may be solved by changing the
>  chunky write option, but the FAQ suggests  setting it to TLS.  Since
>  my problem occured while using TLS, I've changed it to never.
>
>  So, the questions are: 1. Is this a network congestion problem or
>  something else?

It could be network congestion causing dropped packets and retries. 
Chunky-writes in this situation can lead to timeouts.  A packet trace 
should make it clear.

>    and 2. Is setting chunky-writes to never a good idea
>  or am I inviting other problems by doing this?

It's really an efficiency issue.  TLS/SSL has overhead per-packet, so 
it makes sense to send fewer large packets instead of lots of small 
packets.  But if you're having network problems, try it.



From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 12 Dec 2001 14:03:54 -0800
Subject: Re: sendmail blooking

On Wed, 12 Dec 2001 22:16:58 +0200, Mohamed Aly wrote:

>this question is not for qpopper its for sendmail . but i know most of us using sendmail.

http://www.sendmail.org/
news:comp.mail.sendmail

>I have someone sending thousands of emails to one of my clients with some mail bomber programs . so how can i stop or blook this kind of attack on the mail boxes but it must be server side solution. 

http://www.milter.org/
http://www.procmail.org/

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Subject: Re: sendmail blooking
From: Michael Kolos <michael at colba dot net>
Date: Wed, 12 Dec 2001 17:22:51 -0500

Is there a mail loop somewhere?
Am I the only one getting multiple copies of this message?


Peter.allen at moon-light.co dot uk wrote :

> Well not all of us are using sendmail, but any way...&nbsp; 
> You haven't provided much information on the attack, so not all
> suggestions may be valid.&nbsp; 
> 1)&nbsp; Block, temporarily or permanently depending on the importance to
> you of sending mail server, the source IP number(s) at your border router
> or firewall.&nbsp; 
> 2)&nbsp; I'm not sure whether sendmail is running from inetd, but DON'T
> block as in 1) with tcp wrappers as your inetd will probably start
> looping and failing if you do.&nbsp; 
> 3)&nbsp; Provide as much data as you can to the ISP sending the mail to
> you and ask that they assist in stopping it asap.&nbsp; 
> 4)&nbsp; As above but with your upstream provider, to stop it arriving to
> you.&nbsp; 
> 5)&nbsp; See if you can track down the open relay server and attempt to
> get its maintainers to close it.&nbsp; 
> 6)&nbsp; You could investigate whether, like qmail, sendmail has a
> badmailfrom option to reject messages, based on sender's name.&nbsp;
> However the places at 1) are arguably better for dealing with the
> workload.&nbsp; 
> HTH and good luck.&nbsp; 
> Peter
> 
> At 22:16 12/12/01 +0200, Mohamed Aly wrote:
> this
> question is not for qpopper its for sendmail . but i know most of us
> using sendmail.
> &nbsp;
> I have someone sending thousands of emails to
> one of my clients with some mail bomber programs . so how can i stop or
> blook this kind of attack on the mail boxes but it must be server side
> solution. 
> any help?
> thank you

Michael Kolos
Administrateur de RÈseau
Network Administrator
ColbaNet Inc.

NOCC_______________________________
 ColbaNet - http://www.colba.net



Date: Wed, 12 Dec 2001 21:03:47 -0500 (EST)
From: Erik Kangas <kangas at InfiniteDimensions dot com>
Subject: QPopper Optimizations with IMAP


I wish to use Qpopper with WU-IMAP.  This works fine, however,
I would like to use some of the optimizations of qpopper,
like server or fast modes.    The server (linux) runs only
sendmail, qpopper and imap -- no shell connections.

The Qpopper documentation does not really state whether IMAP
can be run in conjunction with either or both of qpopper
optimizations, and what would happen if they were enabled.
It just says that there shouldn't be anything else that modifies
the spool files...but sendmail does...so maybe IMAP is ok...

I assume that this is a fairly common configuration. Can
anyone shed some light on this?

Thank you very much,

-Erik Kangas


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Erik Kangas, Ph.D. --- President of InfiniteDimensions.com
46 Central St., Somerville, MA 02143

Phone: 617-625-0960            ---  FAX: 413-332-0598
Cell:  617-596-9558
kangas at infinitedimensions.com  ---  http://infinitedimensions dot com


From: "Peter Santiago" <petersantiago at bigfoot dot com>
Subject: RE: sendmail blooking
Date: Thu, 13 Dec 2001 12:40:01 +0800

This is a multi-part message in MIME format.

------=_NextPart_000_0078_01C183D3.47FEBEE0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

What's the matter with this?  you're sending multiple emails with the same
contents almost every quarter of an hour...  Got hit with an email
virus?......
  -----Original Message-----
  From: peter.allen at moon-light.co.uk [mailto:peter.allen at moon-light dot co dot uk]
  Sent: Wednesday, December 12, 2001 7:03 PM
  To: Mohamed Aly; Subscribers of Qpopper
  Subject: Re: sendmail blooking



  Well not all of us are using sendmail, but any way...

  You haven't provided much information on the attack, so not all
suggestions may be valid.

  1)  Block, temporarily or permanently depending on the importance to you
of sending mail server, the source IP number(s) at your border router or
firewall.

  2)  I'm not sure whether sendmail is running from inetd, but DON'T block
as in 1) with tcp wrappers as your inetd will probably start looping and
failing if you do.

  3)  Provide as much data as you can to the ISP sending the mail to you and
ask that they assist in stopping it asap.

  4)  As above but with your upstream provider, to stop it arriving to you.

  5)  See if you can track down the open relay server and attempt to get its
maintainers to close it.

  6)  You could investigate whether, like qmail, sendmail has a badmailfrom
option to reject messages, based on sender's name.  However the places at 1)
are arguably better for dealing with the workload.

  HTH and good luck.

  Peter


  At 22:16 12/12/01 +0200, Mohamed Aly wrote:

    this question is not for qpopper its for sendmail . but i know most of
us using sendmail.

    I have someone sending thousands of emails to one of my clients with
some mail bomber programs . so how can i stop or blook this kind of attack
on the mail boxes but it must be server side solution.
    any help?
    thank you



------=_NextPart_000_0078_01C183D3.47FEBEE0
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; 
charset=us-ascii">
<META content="MSHTML 5.50.4207.2601" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=400353204-13122001><FONT face=Arial color=#0000ff 
size=2>What's 
the matter with this?&nbsp; you're sending multiple emails with the same 

contents almost every quarter of an hour...&nbsp; Got hit with an email 
virus?......</FONT></SPAN></DIV>
<BLOCKQUOTE>
  <DIV class=OutlookMessageHeader dir=ltr align=left><FONT 
face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> 
peter.allen at moon-light.co dot uk 
  [mailto:peter.allen at moon-light.co dot uk]<BR><B>Sent:</B> Wednesday, 
December 12, 
  2001 7:03 PM<BR><B>To:</B> Mohamed Aly; Subscribers of 
  Qpopper<BR><B>Subject:</B> Re: sendmail 
blooking<BR><BR></FONT></DIV><BR>Well 
  not all of us are using sendmail, but any way...&nbsp; <BR><BR>You 
haven't 
  provided much information on the attack, so not all suggestions may be 

  valid.&nbsp; <BR><BR>1)&nbsp; Block, temporarily or permanently 
depending on 
  the importance to you of sending mail server, the source IP number(s) 
at your 
  border router or firewall.&nbsp; <BR><BR>2)&nbsp; I'm not sure whether 

  sendmail is running from inetd, but DON'T block as in 1) with tcp 
wrappers as 
  your inetd will probably start looping and failing if you do.&nbsp; 
  <BR><BR>3)&nbsp; Provide as much data as you can to the ISP sending 
the mail 
  to you and ask that they assist in stopping it asap.&nbsp; 
<BR><BR>4)&nbsp; As 
  above but with your upstream provider, to stop it arriving to 
you.&nbsp; 
  <BR><BR>5)&nbsp; See if you can track down the open relay server and 
attempt 
  to get its maintainers to close it.&nbsp; <BR><BR>6)&nbsp; You could 
  investigate whether, like qmail, sendmail has a badmailfrom option to 
reject 
  messages, based on sender's name.&nbsp; However the places at 1) are 
arguably 
  better for dealing with the workload.&nbsp; <BR><BR>HTH and good 
luck.&nbsp; 
  <BR><BR>Peter<BR><BR><BR>At 22:16 12/12/01 +0200, Mohamed Aly 
wrote:<BR>
  <BLOCKQUOTE class=cite cite type="cite"><FONT face=arial 
size=2>this 
    question is not for qpopper its for sendmail . but i know most of us 
using 
    sendmail.</FONT><BR>&nbsp;<BR><FONT face=arial size=2>I have 
someone sending 
    thousands of emails to one of my clients with some mail bomber 
programs . so 
    how can i stop or blook this kind of attack on the mail boxes but it 
must be 
    server side solution. </FONT><BR><FONT face=arial size=2>any 
    help?</FONT><BR><FONT face=arial size=2>thank you 
</FONT></BLOCKQUOTE><BR></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0078_01C183D3.47FEBEE0--


From: =?us-ascii?Q?Christian_Gnagi?= <cg at gnasch dot ch>
Subject: Message repeating !!! AW: sendmail blooking
Date: Thu, 13 Dec 2001 09:58:41 +0100

Dear sirs

I keep getting this message all 5 minutes; please cut the loop!


Christian

-----Ursprungliche Nachricht-----
Von: peter.allen at moon-light.co.uk [mailto:peter.allen at moon-light dot co dot uk]
Gesendet: Mittwoch, 12. Dezember 2001 12:03
An: Mohamed Aly; Subscribers of Qpopper
Betreff: Re: sendmail blooking



Well not all of us are using sendmail, but any way...

You haven't provided much information on the attack, so not all suggestions
may be valid.

remainder of message cut.


Date: Thu, 13 Dec 2001 06:59:51 -0700
From: The Doctor <doctor at doctor.nl2k.ab dot ca>
Subject: Re: sendmail blooking

On Wed, Dec 12, 2001 at 11:02:33AM +0000, peter.allen at moon-light.co dot uk wrote:
> 
> Well not all of us are using sendmail, but any way...
> 
> You haven't provided much information on the attack, so not all suggestions 
> may be valid.
> 
> 1)  Block, temporarily or permanently depending on the importance to you of 
> sending mail server, the source IP number(s) at your border router or 
> firewall.
> 
> 2)  I'm not sure whether sendmail is running from inetd, but DON'T block as 
> in 1) with tcp wrappers as your inetd will probably start looping and 
> failing if you do.
> 
> 3)  Provide as much data as you can to the ISP sending the mail to you and 
> ask that they assist in stopping it asap.
> 
> 4)  As above but with your upstream provider, to stop it arriving to you.
> 
> 5)  See if you can track down the open relay server and attempt to get its 
> maintainers to close it.
> 
> 6)  You could investigate whether, like qmail, sendmail has a badmailfrom 
> option to reject messages, based on sender's name.  However the places at 
> 1) are arguably better for dealing with the workload.
> 
> HTH and good luck.
> 
> Peter
> 
> 
> At 22:16 12/12/01 +0200, Mohamed Aly wrote:
> >this question is not for qpopper its for sendmail . but i know most of us 
> >using sendmail.
> >
> >I have someone sending thousands of emails to one of my clients with some 
> >mail bomber programs . so how can i stop or blook this kind of attack on 
> >the mail boxes but it must be server side solution.
> >any help?
> >thank you
> 


dear mte, quit mailbombing the bsdi-users list.

-- 
Member - Liberal International	On 11 Sept 2001 the WORLD was violated.
This is doctor at nl2k.ab.ca	Ici doctor at nl2k dot ab dot ca
Society MUST be saved! Extremists must dissolve.  
Merry Christmas 2001 and Happy New Year 2002.

Date: Thu, 13 Dec 2001 12:11:41 +0100
From: Jesus Cea Avion <jcea at argo dot es>
Subject: Re: sendmail blooking

peter.allen at moon-light.co dot uk wrote:
> 
> Well not all of us are using sendmail, but any way...

I've received hundreds of identical emails from the list. Please, can
somebody nuke this guy from the list?.

-- 
Jesus Cea Avion                         _/_/      _/_/_/        _/_/_/
jcea at argo.es http://www.argo dot es/~jcea/ _/_/    _/_/  _/_/    _/_/  _/_/
                                      _/_/    _/_/          _/_/_/_/_/
PGP Key Available at KeyServ   _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz

From: "John MacKenzie - Elehost" <john at elehost dot com>
Subject: REMOVE
Date: Thu, 13 Dec 2001 13:08:19 -0500

please get me off this list. No instructions are on the website for 
removal.


Date: Sun, 16 Dec 2001 08:53:56 -0600
From: "J.D. Bronson" <lists at xpec dot com>
Subject: OpenBSD qpopper4.0.3 fails

I am seriously hoping that somone out there knows what to do here.

I compiled qpopper4.0.3 on OpenBSD 3.0 i386 and it built with NO ERRORS.

I launched it and it starts fine.

It answers and then IMMEDIATELY slams the door shut!

# telnet corona 110

Trying 192.168.100.5...
Connected to corona.
Escape character is '^]'.
+OK Qpopper (version 4.0.3) at corona.domain.com 
starting.  <4321.1008514310 at corona.domain dot com>
-ERR POP EOF or I/O Error
+OK Pop server at corona.domain.com signing off.
Connection closed by foreign host.

I tried compiling with debug and running -d and from what I read, nothing 
was of any help! - i then tried compiling MIMIMUM and that made no difference.

What can I check?? any hints at all?

Thanx in advance for any assistance!


Date: Sun, 16 Dec 2001 09:33:32 -0600
From: "J.D. Bronson" <lists at xpec dot com>
Subject: Re: OpenBSD qpopper4.0.3 fails

>
>
>At 09:53 AM 12/16/01, you wrote:
>>I am seriously hoping that somone out there knows what to do here.
>>
>>I compiled qpopper4.0.3 on OpenBSD 3.0 i386 and it built with NO ERRORS.
>>
>>I launched it and it starts fine.
>
>Tell the list what method you are using to launch it.

/usr/local/sbin/qpopper -s



>>It answers and then IMMEDIATELY slams the door shut!
>
>Tell the list more about the environment.
Like? - I dont know what to put here...
CC=gcc
CFLAGS=-O2


>># telnet corona 110
>>
>>Trying 192.168.100.5...
>>Connected to corona.
>>Escape character is '^]'.
>>+OK Qpopper (version 4.0.3) at corona.domain.com 
>>starting.  <4321.1008514310 at corona.domain dot com>
>>-ERR POP EOF or I/O Error
>>+OK Pop server at corona.domain.com signing off.
>>Connection closed by foreign host.
>>
>>I tried compiling with debug and running -d and from what I read, nothing 
>>was of any help! - i then tried compiling MIMIMUM and that made no difference.
>>
>>What can I check?? any hints at all?
>>
>>Thanx in advance for any assistance!
>
>Tell the list specifically:
>
>- are you running qpopper stand-alone?
>yes

>- From inetd?
No

>- from xinetd?
No

>- with tcp-wrappers?
Hmm. I have installed tcp-wrappers, but didnt tell qpopper about it.
I have an allow/deny file - but only use this for sshd2.
Could this be an issue??

>- behind a firewall?
Not applicable. Even using 'localhost' to port 110 fails.

>- command line arguments?
Started with -s only

>- config file(s) in use?
No

Lastly, compile time options:
./configure --enable-servermode --enable-log-facility=LOG_LOCAL2 
--enable-standalone --enable-fast-update --enable-chunky-writes=1 
--disable-check-pw-max --enable-auto-delete


..thanx for trying to help so far!




J.D. Bronson
Aurora Health Care
Information Services
"Death before downtime"


From: Ted Cabeen <ted at impulse dot net>
Subject: Re: OpenBSD qpopper4.0.3 fails
Date: Mon, 17 Dec 2001 10:35:11 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

In message <073475824678990985092 at lists.pensive dot org>, "J.D. Bronson" writes:
>I am seriously hoping that somone out there knows what to do here.
>
>I compiled qpopper4.0.3 on OpenBSD 3.0 i386 and it built with NO ERRORS.
>
>I launched it and it starts fine.
>
>It answers and then IMMEDIATELY slams the door shut!
>
>I tried compiling with debug and running -d and from what I read, nothing 
>was of any help! - i then tried compiling MIMIMUM and that made no difference.
>
>What can I check?? any hints at all?

There's a known bug when running qpopper on OpenBSD.  The socket handling 
code in qpopper triggers a bug in OpenBSD.  There was a thread about this on 
tech@openbsd about a month ago, but I haven't heard any developments since 
then.  It will work fine if you run qpopper through inetd, so I'd suggest 
doing that as a workaround.

Another thing to note is that with OpenBSD, you have to force DES passwords,
as OpenBSD defaults to blowfish, and since there's no PAM in OpenBSD, qpopper
has to do the authenication itself.  I was working on a patch that would
provide support for blowfish and MD5 crypt replacements, but I haven't
finished it yet.

- -- 
Ted Cabeen           http://www.pobox.com/~secabeen            ted at impulse dot net 
Check Website or Keyserver for PGP/GPG Key BA0349D2         secabeen at pobox dot com
"I have taken all knowledge to be my province." -F. Bacon  secabeen at cabeen dot org
"Human kind cannot bear very much reality."-T.S.Eliot        cabeen at netcom dot com


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (OpenBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE8HjrfoayJfLoDSdIRAuhBAJ0WrfEa7nFwufqzuOYhefrCWiFXPgCgqriQ
vaYut2EL1+PXP80v5k5Sjl4
=+tdd
-----END PGP SIGNATURE-----


From: "Kenneth Porter" <shiva at well dot com>
Date: Mon, 17 Dec 2001 18:39:03 -0800
Subject: Re: REMOVE

On Thu, 13 Dec 2001 13:08:19 -0500, John MacKenzie - Elehost wrote:

>please get me off this list. No instructions are on the website for removal.

From your mail headers:

>List-Unsubscribe: <mailto:qpopper-request at lists.pensive dot org?body=unsubscribe>

But this is your real problem:

X-Mailer: Microsoft Outlook Express 5.50.4807.1700

Get a real email client that shows you important headers and doesn't
try to hide them from you as if you were a clueless newb (which I
assume you're not).

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Wed, 19 Dec 2001 09:36:22 +0800 (HKT)
From: PM WONG <pmwong at power25t.hkbu.edu dot hk>
Subject: force clean mail after reading for specific users?

We run qpopper 4.0.3
I know that this version has the option of defining for
individual users that no temp file (.username.pop) be created
for him when he accessed his mail (i did it by creating a file
called .username.qpopper-options under the /var/spool/mail directory)

It'll be even more useful if somehow we could force for some user
that when he has downloaded his mail to his pc pop client machine,
that the mail which is left on the mail server is cleaned as well
(We have many many users who just leave several 100 Mb of mails
without deleting them)
I doubt if this is possible or not


From: "Mark-Nathaniel Weisman" <mweisman at gci dot net>
Subject: Mail for Virtual Domains.
Date: Tue, 18 Dec 2001 23:04:58 -0900

Just out of curosity, what mail prog does anyone use when using Virtual
Hosts on a Red Hat Linux box? I'm having to write perl scrips handled by
the cron to move mail back and forth from Virtual mailboxes to authentic
users of the system, cause Qpopper will only grab that one folder. Any
suggestions would be greatly appreciated.

Thank you,
Mark-Nathaniel Weisman A+, MCP, CNA, MOUS MI
Network Systems Administrator
Career Academy
Anchorage, AK



Date: Wed, 19 Dec 2001 12:08:48 -0500
From: Scott McDermott <mcdermot at questra dot com>
Subject: Re: QPopper Optimizations with IMAP

Erik Kangas on Wed 12/12 21:03 -0500:
> I wish to use Qpopper with WU-IMAP.  This works fine, however, I would
> like to use some of the optimizations of qpopper, like server or fast
> modes.    The server (linux) runs only sendmail, qpopper and imap --
> no shell connections.

the spool can be appended to in server mode without corruption, just not
randomly accessed.

There were a couple of lengthy discussions on this, one just recently,
please see the mailing list archives.

Date: Wed, 19 Dec 2001 12:59:43 -0500 (EST)
From: Thomas Walter <tbw at geo.hunter.cuny dot edu>
Subject: Question: send mail password authentication

>
> I'm setting up qpopper 4.0 for the first time and want it to ask for the
> users password when uploading email to the outgoing server as well as when
> they get their email. I can't find a reference to this in the online docs.
>
> Can anyone point me to the correct configuration option? BTW, I'm using
> qpopper on a Solaris 2.7 Sun.
>
> Thanks.
>
> Tom
>
>
> =================================================================================
>
> Thomas Walter
> Geography & Computer Science Departments
> Hunter College of the City University of New York
> 695 Park Avenue
> New York, NY 10021
>
> (212)772-5457 Office
> (212)772-5268 Fax
> tbwalter at geo.hunter.cuny dot edu
> http://geography.hunter.cuny.edu/~tbw
>
>


Date: Wed, 19 Dec 2001 15:22:02 -0500 (EST)
From: Chip Old <fold at bcpl dot net>
Subject: Re: Question: send mail password authentication

On Wed, 19 Dec 2001, Thomas Walter wrote:

> > I'm setting up qpopper 4.0 for the first time and want it to ask for the
> > users password when uploading email to the outgoing server as well as when
> > they get their email. I can't find a reference to this in the online docs.
> >
> > Can anyone point me to the correct configuration option? BTW, I'm using
> > qpopper on a Solaris 2.7 Sun.

What you're looking for is SMTP AUTH, which has nothing to do with
Qpopper.  Qpopper is POP3 server software, not SMTP server software, so it
is responsible only for delivering mail from the mail server to your
users' POP3 mail client software.  Mail sent the other direction - from
your users' POP3 mail client software to the mail server - is accepted by
your mail transport agent (your SMTP server software), not by Qpopper.

If you're using a Solaris box, the MTA is probably Sendmail.  Recent
versions of sendmail (8.10 and later I think) can be compiled to use SMTP
AUTH.  You're probably using the SMI distribution of sendmail, and AFAIK
there's no way to add SMTP AUTH to that.  You'll need to download the
source code from www.sendmail.org and compile it yourself.

-- 
Chip Old (Francis E. Old)             E-Mail:  fold at bcpl dot net
Manager, BCPL Network Services        Phone:   410-887-6180
Manager, BCPL.NET Internet Services   FAX:     410-887-2091
320 York Road
Towson, MD 21204  USA


Date: Wed, 19 Dec 2001 12:54:51 -0800
From: Chuck Yerkes <chuck+qpopper at yerkes dot com>
Subject: Re: OpenBSD qpopper4.0.3 fails

It's be neat to have clean hooks to replace the /etc/passwd
based authentication with an external one (perhaps via #define?).
MANY platforms don't have PAM and those that do, are sometimes
not quite compatible.

Being able to cleanly pull the auth out into LDAP (for example)
would be a boon.  I've done this before for 2.5, but not the
current code base.


Quoting Ted Cabeen (ted at impulse dot net):
> In message <073475824678990985092 at lists.pensive dot org>, "J.D. Bronson" writes:
> >I am seriously hoping that somone out there knows what to do here.
> >I compiled qpopper4.0.3 on OpenBSD 3.0 i386 and it built with NO ERRORS.
> >I launched it and it starts fine.
> >It answers and then IMMEDIATELY slams the door shut!
...
> >What can I check?? any hints at all?
> 
> There's a known bug when running qpopper on OpenBSD.  The socket handling 
> code in qpopper triggers a bug in OpenBSD.  There was a thread about this on 
> tech@openbsd about a month ago, but I haven't heard any developments since 
> then.  It will work fine if you run qpopper through inetd, so I'd suggest 
> doing that as a workaround.
> 
> Another thing to note is that with OpenBSD, you have to force DES passwords,
> as OpenBSD defaults to blowfish, and since there's no PAM in OpenBSD, qpopper
> has to do the authenication itself.  I was working on a patch that would
> provide support for blowfish and MD5 crypt replacements, but I haven't
> finished it yet.
> - -- 
> Ted Cabeen           http://www.pobox.com/~secabeen            ted at impulse dot net 

From: "Bernd Prager" <bprager at iamerica dot net>
Subject: log-login string from sample/qpopper.config is not working
Date: Wed, 19 Dec 2001 21:11:26 -0500

This is a multi-part message in MIME format.

------=_NextPart_000_031C_01C188D1.B825C530
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Hi everybody,

I was trying to enable the log-login feature in the config file.
set log-login                = "(v%0) POP login for /"%1/" at (%2) %3"
But the server gets confused with the the quotation marks.
The trace says:
--- snip ---
Set log-login to "(v%0) POP login for /"
Expected comment or end of line; found "%" at line 678 of config file 
/etc/mail/qpopper.config
--- snip ---
Did somebody get it working?

Thanks for any help,
-- Bernd

----------

Scully: "Mulder, toads just fell from the sky!"
Mulder: "I guess their parachutes didn't open."
   -"The X Files"

------=_NextPart_000_031C_01C188D1.B825C530
Content-Type: text/html;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; 
charset=windows-1252">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>Hi everybody,</FONT></DIV>
<DIV><FONT size=2></FONT>&nbsp;</DIV>
<DIV><FONT size=2>I was trying to enable the log-login feature in the 
config 
file.</FONT></DIV>
<DIV><FONT size=2>set 
log-login&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs
p;&nbsp;&nbsp;&nbsp;&nbsp; 
= "(v%0) POP login for /"%1/" at (%2) %3"</FONT></DIV>
<DIV><FONT size=2>But the server gets confused with the the quotation 
marks.</FONT></DIV>
<DIV><FONT size=2>The trace says:</FONT></DIV>
<DIV><FONT size=2>--- snip ---</FONT></DIV>
<DIV><FONT size=2>Set log-login to "(v%0) POP login for /"<BR>Expected 
comment 
or end of line; found "%" at line 678 of config file 
/etc/mail/qpopper.config<BR>--- snip ---</FONT></DIV>
<DIV><FONT size=2>Did somebody get it working?</FONT></DIV>
<DIV><FONT size=2></FONT>&nbsp;</DIV>
<DIV><FONT size=2>Thanks for any help,</FONT></DIV>
<DIV><FONT size=2>-- Bernd</FONT></DIV>
<DIV><FONT size=2></FONT>&nbsp;</DIV>
<DIV><FONT size=2>----------</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=2>Scully: "Mulder, toads just fell from the 
sky!"<BR>Mulder: "I 
guess their parachutes didn't open."<BR>&nbsp;&nbsp;&nbsp;-"The X 
Files"</FONT></DIV></BODY></HTML>

------=_NextPart_000_031C_01C188D1.B825C530--


Date: Wed, 19 Dec 2001 19:20:47 -0700
From: Stephen Mawdsley <stephen at altanet dot com>
Subject: Re: force clean mail after reading for specific users?

At 06:36 PM 12/18/2001, you wrote:
>It'll be even more useful if somehow we could force for some user
>that when he has downloaded his mail to his pc pop client machine,
>that the mail which is left on the mail server is cleaned as well
>(We have many many users who just leave several 100 Mb of mails
>without deleting them)
>I doubt if this is possible or not

PM,

I run a Perl script called trimmail which is set by cron to run every 
night.  It goes through every user's mailbox and trims out unread messages 
that are older than 30 days and read messages older than 3 days.  I this 
way, my users are happy and I get to keep my hard drive clean.  If you want 
a copy, just send me a message.

Regards,
Stephen

________________________________
Stephen Mawdsley
Altanet Corporation
http://www.altanet.com


Date: Wed, 19 Dec 2001 23:04:41 -0500
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: OpenBSD qpopper4.0.3 fails

At 10:35 AM -0800 12/17/01, Ted Cabeen wrote:

>  There's a known bug when running qpopper on OpenBSD.  The socket handling
>  code in qpopper triggers a bug in OpenBSD.  There was a thread about this on
>  tech@openbsd about a month ago, but I haven't heard any developments since
>  then.  It will work fine if you run qpopper through inetd, so I'd suggest
>  doing that as a workaround.

There is a fix for the OpenBSD bug, but I'm not sure if it is in 
OpenBSD current or where.  There is also a work-around that's in the 
Qpopper current, so will be in the next release.

Date: Wed, 19 Dec 2001 23:08:56 -0500
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: OpenBSD qpopper4.0.3 fails

At 12:54 PM -0800 12/19/01, Chuck Yerkes wrote:

>  It's be neat to have clean hooks to replace the /etc/passwd
>  based authentication with an external one (perhaps via #define?).

This would be useful, for several reasons.  There are people that 
prefer to run with all mail users defined in a database, for extra 
security and/or to avoid limits on the number of users on some 
platforms.  The security aspect alone is compelling, as Qpopper 
wouldn't need to start as root anymore.  Probably it should be done 
as a ''--with-foo" ./configure option that causes Qpopper to link 
with a supplied library and call standard functions.

>  MANY platforms don't have PAM and those that do, are sometimes
>  not quite compatible.\

Incompatibilities should be fixed.



Date: Thu, 20 Dec 2001 13:52:54 -0600
From: Tim Tyler <tyler at beloit dot edu>
Subject: openssl on AIX?

Qpopper experts,
   I am running openssl on an AIX4.3.3 system.  I successfully compiled 
qpopper.  However, I can't seem to create the proper certificates given the 
example on line.  Note: AIX does NOT support a /dev/urandom 
generator.   Hence, the very first openssl command fails:
openssl req -new -nodes -out req.perm -keyout /etc/mail/certs/cert.perm

    I am guessing that I have to use genrsa with the -rand filenames 
function in order to generate the keys.(?)  Has anyone created keys on AIX 
for qpopper?  If so, can you share with me your steps for successfully 
creating the necessary cert.pem file (self signed preferred)?
   Thanks!


Tim Tyler
Network Engineer - Beloit College
tyler at beloit dot edu


Date: Thu, 20 Dec 2001 15:41:36 -0500
From: Daniel Senie <dts at senie dot com>
Subject: BLOCK_UID?

I'm curious... I can't find anything in the install/configure process that 
allows setting of BLOCK_UID. The .h files for popper and poppassd both set 
BLOCK_UID to 10 if it's not already set. On the systems I work with, the 
BLOCK_UID should be set to 100.

I guess it'd make sense if configure allowed this to be configured...

Thoughts?

Dan
-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


From: Mark <admin at asarian-host dot net>
Date: Thu, 20 Dec 2001 23:10:03 +0100
Subject: Qpopper loch mechanism

Dear folks,

I have a question about Qpopper's locking mechanism (3.x). I have a Perl LDA
on my FreeBSD 4.1.1 box, in which I use an exclusive flock to lock a user
mailbox before writing to it. I always thought qpopper honors the same
flock, and will not truncate on the user's mailbox until it can acquire a
lock. But since I suspect to have lost some mail, I want to be sure now.

I know that (additionally?) qpopper uses the .user.lock and user.lock file.
Should I try and emulate that, or will an flock on mbox suffice? Basically,
all I need to know is which one should I set to prevent qpopper from writing
and/or truncating mbox.

Any clarification would be highly appreciated,

- Mark

        System Administrator Asarian-host.org

---
"If you were supposed to understand it,
we wouldn't call it code." - FedEx


Last updated on 20 Dec 2001 by Pensive Mailing List Admin