The qpopper list archive ending on 20 Dec 2000
Topics covered in this issue include:
1. Strange LOGs ...
"Alexander Kiselev" <akiselev at mow-co.ru.dhl dot com>
Thu, 14 Dec 2000 12:07:07 +0300
2. distributed mailboxes
"Vladimir Nikolic" <vn at ptt dot yu>
Thu, 14 Dec 2000 15:27:00 +0100
3. Re: distributed mailboxes
Fergal Daly <fergal at esatclear dot ie>
Thu, 14 Dec 2000 15:00:49 +0000
4. Anybody using DRAC with Qpopper
"Shannon McLemore" <sdmclemore at mindspring dot com>
Thu, 14 Dec 2000 11:34:12 -0500
5. Re: Anybody using DRAC with Qpopper
Steven Champeon <schampeo at hesketh dot com>
Thu, 14 Dec 2000 12:02:52 -0500
6. Re: Anybody using DRAC with Qpopper
"Shannon McLemore" <sdmclemore at mindspring dot com>
Thu, 14 Dec 2000 12:46:20 -0500
7. Re: Anybody using DRAC with Qpopper
Steven Champeon <schampeo at hesketh dot com>
Thu, 14 Dec 2000 13:08:06 -0500
8. RE: Strange LOGs ...
edward_murrah at am.exch.agilent dot com
Thu, 14 Dec 2000 14:40:22 -0700
9. how to unsubscribe from this list?
Julie Xu <j.xu at uws.edu dot au>
Fri, 15 Dec 2000 09:22:16 +1100
10. Re: how to unsubscribe from this list?
Steven Champeon <schampeo at hesketh dot com>
Thu, 14 Dec 2000 17:29:17 -0500
11. Re: Anybody using DRAC with Qpopper
"Kenneth Porter" <shiva at well dot com>
Thu, 14 Dec 2000 16:22:25 -0800
12. Re: Anybody using DRAC with Qpopper
Forrest Aldrich <forrie at forrie dot com>
Thu, 14 Dec 2000 20:34:23 -0500
13. Re: distributed mailboxes
Stephen Samuel <samuel at bcgreen dot com>
Thu, 14 Dec 2000 18:36:26 -0800
14. Re: Anybody using DRAC with Qpopper
"Kenneth Porter" <shiva at well dot com>
Thu, 14 Dec 2000 18:59:49 -0800
15.
admin at radiks dot net
Fri, 15 Dec 2000 09:01:12 -0600
16. Re: your mail
Joseph S D Yao <jsdy at cospo.osis dot gov>
Fri, 15 Dec 2000 10:45:36 -0500
17. Using quota
Edwin <edwin at introweb dot nl>
Sat, 16 Dec 2000 14:16:12 +0100 (CET)
18. DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
<fikser at irc.randmeer dot nl>
Sat, 16 Dec 2000 18:37:34 +0100 (CET)
19. DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
Rick Pim <rick at post.queensu dot ca>
Sat, 16 Dec 2000 11:34:15 -0500 (EST)
20. Re: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
Kevin McKinnon <kevin at sunshinecable dot com>
Sat, 16 Dec 2000 08:37:03 -0800 (PST)
21. Re: Using quota
Alan Brown <alan at manawatu.gen dot nz>
Sun, 17 Dec 2000 14:58:54 +1300 (NZDT)
22. Re: Logging Output ?
Qpopper Support <qpopper at qualcomm dot com>
Sun, 17 Dec 2000 12:15:45 -0800
23. Re: Relocating the dropbox - LAST UPD
Qpopper Support <qpopper at qualcomm dot com>
Sun, 17 Dec 2000 12:17:57 -0800
24. Re: bulldb
Randall Gellens <randy at qualcomm dot com>
Sun, 17 Dec 2000 12:15:08 -0800
25. Re: how do i use both apop + clear text passwords
Qpopper Support <qpopper at qualcomm dot com>
Sun, 17 Dec 2000 12:27:13 -0800
26. Re: Maildir - not enoug help
Qpopper Support <qpopper at qualcomm dot com>
Sun, 17 Dec 2000 12:21:41 -0800
27. Qpop / sendmail 8.9.2 and Netscape Messenger
Ron Calzone <ron at cze dot com>
Mon, 18 Dec 2000 00:06:21 -0600
28. Re: Qpop / sendmail 8.9.2 and Netscape Messenger
Steven Champeon <schampeo at hesketh dot com>
Mon, 18 Dec 2000 09:20:43 -0500
29. Re: Qpop / sendmail 8.9.2 and Netscape Messenger
Ron Calzone <ron at cze dot com>
Mon, 18 Dec 2000 09:18:02 -0600
30. Re: Qpop / sendmail 8.9.2 and Netscape Messenger
Steven Champeon <schampeo at hesketh dot com>
Mon, 18 Dec 2000 10:21:06 -0500
31. Re: Qpop / sendmail 8.9.2 and Netscape Messenger
Alan Brown <alan at manawatu.gen dot nz>
Tue, 19 Dec 2000 04:34:19 +1300 (NZDT)
32. DNS lookup
"John MacKenzie" <john at elehost dot com>
Mon, 18 Dec 2000 12:56:36 -0500
33. NEW USER of Qpopper
Robert Brandtjen <rob at prometheusmedia dot com>
Mon, 18 Dec 2000 15:39:30 -0600
34. Re: NEW USER of Qpopper
Steven Champeon <schampeo at hesketh dot com>
Mon, 18 Dec 2000 16:52:05 -0500
35. Re: Using quota
Randall Gellens <randy at qualcomm dot com>
Tue, 19 Dec 2000 18:03:01 -0800
36. Obviously I have an error!
James <james at host365 dot com>
Wed, 20 Dec 2000 12:10:56 +0000
37. Re: Using quota
"Edwin Ringersma" <edwin at introweb dot nl>
Wed, 20 Dec 2000 14:57:09 +0100
38. Serious problem....
Ricky Crow <rickyc at thenew.gamesbbs dot com>
Wed, 20 Dec 2000 03:19:39 -0600 (CST)
39. Re: Serious problem....
Peter Evans <peter at gol dot com>
Thu, 21 Dec 2000 00:37:19 +0900
40. Re: Serious problem....
Ricky Crow <rickyc at thenew.gamesbbs dot com>
Wed, 20 Dec 2000 09:53:07 -0600 (CST)
41. Bind compile under gcc?
Ron Calzone <ron at cze dot com>
Wed, 20 Dec 2000 09:51:58 -0600
42. Re: Using quota
Alan Brown <alan at manawatu.gen dot nz>
Thu, 21 Dec 2000 05:08:28 +1300 (NZDT)
43. RE: Serious problem....
"Peter R. Hubberstey" <peter at ukip dot com>
Wed, 20 Dec 2000 16:31:56 -0000
44. Re: Bind compile under gcc?
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 20 Dec 2000 11:34:20 -0500 (EST)
45. Re: Using quota
Theresa M Peter <theresa at email.uc dot edu>
Wed, 20 Dec 2000 12:12:09 -0500
46. RE: Serious problem....
Ricky Crow <rickyc at thenew.gamesbbs dot com>
Wed, 20 Dec 2000 10:34:26 -0600 (CST)
47. Re: Using quota
Sergiy Zhuk <serge at yahoo-inc dot com>
Wed, 20 Dec 2000 09:56:08 -0800 (PST)
48. Re: Serious problem....
peter.allen at moon-light.co dot uk
Wed, 20 Dec 2000 16:34:09 +0000
49. Re: Using quota
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 20 Dec 2000 14:07:48 -0500 (EST)
50. Re: Serious problem....
DWX Network Operations <tracy at dwx dot com>
Wed, 20 Dec 2000 13:09:58 -0600
From: "Alexander Kiselev" <akiselev at mow-co.ru.dhl dot com>
Subject: Strange LOGs ...
Date: Thu, 14 Dec 2000 12:07:07 +0300
This is a multi-part message in MIME format.
------=_NextPart_000_00F5_01C065C6.6161C020
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
Hi all,
today i saw my log files of Qpopper (v 3.0.2):
Thu Dec 14 11:11:45 2000 [28487] EOF from at xxx.xxx.xxx.xxx =
(xxx.xxx.xxx): [0] 239 (Connection refused);
0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28487] (null) at xxx.xxx.xxx.xxx =
(xxx.xxx.xxx): -ERR POP EOF or I/O Error: 239 (C
onnection refused); 0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28488] EOF from at xxx.xxx.xxx.xxx =
(xxx.xxx.xxx): [0] 239 (Connection refused);
0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28488] (null) at xxx.xxx.xxx.xxx =
(xxx.xxx.xxx): -ERR POP EOF or I/O Error: 239 (C
onnection refused); 0 (Error 0)
Is it possible hack?
Thanks.
--
Bests,
Alex
------=_NextPart_000_00F5_01C065C6.6161C020
Content-Type: text/html;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=koi8-r">
<META content="MSHTML 5.50.4030.2400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>Hi all,</DIV>
<DIV> </DIV>
<DIV>today i saw my log files of Qpopper (v 3.0.2):</DIV>
<DIV> </DIV>
<DIV>Thu Dec 14 11:11:45 2000 [28487] EOF from at xxx.xxx.xxx.xxx
(xxx.xxx.xxx): [0] 239 (Connection refused);<BR>0 (Error 0)<BR>Thu Dec =
14
11:11:45 2000<BR>Thu Dec 14 11:11:45 2000 [28487] (null) at =
xxx.xxx.xxx.xxx
(xxx.xxx.xxx): -ERR POP EOF or I/O Error: 239 (C<BR>onnection refused); =
0 (Error
0)<BR>Thu Dec 14 11:11:45 2000<BR>Thu Dec 14 11:11:45 2000 [28488] EOF
from at xxx.xxx.xxx.xxx (xxx.xxx.xxx): [0] 239 (Connection
refused);<BR>0 (Error 0)<BR>Thu Dec 14 11:11:45 2000<BR>Thu Dec 14 =
11:11:45 2000
[28488] (null) at xxx.xxx.xxx.xxx (xxx.xxx.xxx): -ERR POP EOF or =
I/O
Error: 239 (C<BR>onnection refused); 0 (Error 0)</DIV>
<DIV> </DIV>
<DIV>Is it possible hack?</DIV>
<DIV> </DIV>
<DIV>Thanks.</DIV>
<DIV><BR>--<BR>Bests,<BR>Alex</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></BODY></HTML>
------=_NextPart_000_00F5_01C065C6.6161C020--
From: "Vladimir Nikolic" <vn at ptt dot yu>
Subject: distributed mailboxes
Date: Thu, 14 Dec 2000 15:27:00 +0100
I have too many users, so I can't put their mailboxes on one host. What is
the best way for distribute them on several hosts?
Date: Thu, 14 Dec 2000 15:00:49 +0000
From: Fergal Daly <fergal at esatclear dot ie>
Subject: Re: distributed mailboxes
You could try
http://www.us.vergenet.net/linux/perdition/
I've tested it and it works, haven't used in a large scale environment but
I'd imagine it works there too,
Fergal
On Thu, Dec 14, 2000 at 03:27:00PM +0100, Vladimir Nikolic wrote:
> I have too many users, so I can't put their mailboxes on one host. What is
> the best way for distribute them on several hosts?
>
--
From: "Shannon McLemore" <sdmclemore at mindspring dot com>
Subject: Anybody using DRAC with Qpopper
Date: Thu, 14 Dec 2000 11:34:12 -0500
I cannot seem to get this to work.
Anyone have step by step instructions on what they did.
Thanks
Date: Thu, 14 Dec 2000 12:02:52 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: Anybody using DRAC with Qpopper
on Thu, Dec 14, 2000 at 11:34:12AM -0500, Shannon McLemore wrote:
> I cannot seem to get this to work.
> Anyone have step by step instructions on what they did.
I've got a better idea - why don't you tell us a little more about
your situation, certain details like qpopper version, drac version,
db version, operating system platform, and environment can be very
helpful in resolving problems of this sort. Also, if you tell us
what *you* tried, we may be able to spot the error.
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
From: "Shannon McLemore" <sdmclemore at mindspring dot com>
Subject: Re: Anybody using DRAC with Qpopper
Date: Thu, 14 Dec 2000 12:46:20 -0500
This is my configuration:
Red Hat Linux 7.0
postfix 20001121
dracd 1.10
qpopper 3.1.1
I installed the postfix-20001121-3.i386.rpm
I installed the dracd-1.10-4.i386.rpm
I download qpopper from Qualcomm and compiled it with the follwing options
--enable-specialauth --enable-drac --enable-log-login
ran make
copied popper to /usr/local/lib
added pop3 file to xinetd.d with the following:
service pop3
{
socket_type = stream
protocol = tcp
wait = no
user = root
server = /usr/local/lib/popper
server_args = qpopper -s -D
port = 110
}
I setup postfix main.cf with
smtpd_recipient_restrictions = check_client_access btree:/etc/mail/dracd
I can receive mail via pop.
I can send mail from one local user to another local user.
I can send mail from one local user to a remote user using pine on the
machine.
I cannot send mail from one local user to a remote user using a pop email
client (Outlook Express)
----- Original Message -----
From: "Shannon McLemore" <sdmclemore at mindspring dot com>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Thursday, December 14, 2000 11:34 AM
Subject: Anybody using DRAC with Qpopper
> I cannot seem to get this to work.
> Anyone have step by step instructions on what they did.
>
> Thanks
>
>
Date: Thu, 14 Dec 2000 13:08:06 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: Anybody using DRAC with Qpopper
on Thu, Dec 14, 2000 at 12:46:20PM -0500, Shannon McLemore wrote:
> I setup postfix main.cf with
> smtpd_recipient_restrictions = check_client_access btree:/etc/mail/dracd
I don't know anything about postfix, unfortunately.
> I can receive mail via pop.
> I can send mail from one local user to another local user.
> I can send mail from one local user to a remote user using pine on the
> machine.
> I cannot send mail from one local user to a remote user using a pop email
> client (Outlook Express)
Run 'strings' on the dracd db file - you should see strings of the form
[ip][unixtimestamp]
Check the IP for the client you're using to ensure that it's been properly
recorded in the db file. If it has been properly entered, then qpopper/drac
has done its job and you can go ask a postfix list for more help ;)
Then I'd suggest that you look at the logs to see if postfix is
telling you why it's rejecting the messages.
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
From: edward_murrah at am.exch.agilent dot com
Subject: RE: Strange LOGs ...
Date: Thu, 14 Dec 2000 14:40:22 -0700
I saw this error this week, the users was trying to copy a 82MB file from
his Unix mail. As soon as I had him go into the mail from Unix and delete
messages he did no need POP was able to move the file. I do not know the
size of his Exchange mailbox but I have a feeling when POP tried to load the
Unix mail the limit was exceeded causing the error EOF.
--------
Edward Murrah
24001 E. Mission Ave
Liberty Lake
Wa 99019
Telnet 921-3867
Phone (509) 921-3867
Email Edward_Murrah at agilent dot com
-----Original Message-----
From: Alexander Kiselev [mailto:akiselev at mow-co.ru.dhl dot com]
Sent: Thursday, December 14, 2000 1:07 AM
To: Subscribers of Qpopper
Subject: Strange LOGs ...
Hi all,
today i saw my log files of Qpopper (v 3.0.2):
Thu Dec 14 11:11:45 2000 [28487] EOF from at xxx.xxx.xxx.xxx (xxx.xxx.xxx):
[0] 239 (Connection refused);
0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28487] (null) at xxx.xxx.xxx.xxx (xxx.xxx.xxx):
-ERR POP EOF or I/O Error: 239 (C
onnection refused); 0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28488] EOF from at xxx.xxx.xxx.xxx (xxx.xxx.xxx):
[0] 239 (Connection refused);
0 (Error 0)
Thu Dec 14 11:11:45 2000
Thu Dec 14 11:11:45 2000 [28488] (null) at xxx.xxx.xxx.xxx (xxx.xxx.xxx):
-ERR POP EOF or I/O Error: 239 (C
onnection refused); 0 (Error 0)
Is it possible hack?
Thanks.
--
Bests,
Alex
Date: Fri, 15 Dec 2000 09:22:16 +1100
From: Julie Xu <j.xu at uws.edu dot au>
Subject: how to unsubscribe from this list?
Any help will be appreciated
Thanks in advance
Julie Xu
Unix/Network administrator
Information Technology and Communication
University of Western Sydney, Macarthur
Campbelltown NSW 2560
Phone: 61 02 46203098
email: j.xu at uws.edu dot au
Date: Thu, 14 Dec 2000 17:29:17 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: how to unsubscribe from this list?
on Fri, Dec 15, 2000 at 09:22:16AM +1100, Julie Xu wrote:
> Any help will be appreciated
It's easy. Just read the headers:
List-Subscribe: <mailto:qpopper-request at lists.pensive dot org?body=subscribe>
List-Unsubscribe: <mailto:qpopper-request at lists.pensive dot org?body=unsubscribe>
List-Archive: <mailto:autoshare at lists.pensive dot org?body=index%20QPopper>
List-Post: <mailto:qpopper at lists.pensive dot org>
List-Owner: Pensive Mailing List Admin <listmaster at lists.pensive dot org>
List-Help: http://www.pensive.org/Mailing_Lists/
List-Id: <QPopper.lists.pensive.org>
HTH,
Steve
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 14 Dec 2000 16:22:25 -0800
Subject: Re: Anybody using DRAC with Qpopper
On Thu, 14 Dec 2000 13:08:06 -0500, Steven Champeon wrote:
>Run 'strings' on the dracd db file - you should see strings of the form
>[ip][unixtimestamp]
From the "testing" page for DRAC (http://mail.cc.umanitoba.ca/drac/),
you can use this command to view the current DRAC database:
db_dump -p /etc/mail/dracd.db
Additionally, qpopper logs its DRAC invocations, so you should see
lines like:
Dec 14 16:13:17 mailhost in.qpopper[25879]: [drac]: login by ken from
host host.domain.com (10.0.0.42) [drac.c:47]
Another thing to check for, make sure you have the portmap package
installed and running. DRAC uses RPC for communication with qpopper,
and RPC needs portmapper running.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
Date: Thu, 14 Dec 2000 20:34:23 -0500
From: Forrest Aldrich <forrie at forrie dot com>
Subject: Re: Anybody using DRAC with Qpopper
I'd like to see a more "print friendly" dumper of the dracd.db file...
something that might
show:
IP Time Authenticated
===========================================
123.45.67.89 Thu Dec 14 20:31:37 EST 2000
And some other userland means of mucking with it. Probably an easy Perl
script.
_F
At 04:22 PM 12/14/2000 -0800, Kenneth Porter wrote:
>On Thu, 14 Dec 2000 13:08:06 -0500, Steven Champeon wrote:
>
> >Run 'strings' on the dracd db file - you should see strings of the form
> >[ip][unixtimestamp]
>
> >From the "testing" page for DRAC (http://mail.cc.umanitoba.ca/drac/),
>you can use this command to view the current DRAC database:
>
>db_dump -p /etc/mail/dracd.db
>
>Additionally, qpopper logs its DRAC invocations, so you should see
>lines like:
>
>Dec 14 16:13:17 mailhost in.qpopper[25879]: [drac]: login by ken from
>host host.domain.com (10.0.0.42) [drac.c:47]
>
>Another thing to check for, make sure you have the portmap package
>installed and running. DRAC uses RPC for communication with qpopper,
>and RPC needs portmapper running.
>
>Ken
>mailto:shiva at well dot com
>http://www.sewingwitch.com/ken/
Date: Thu, 14 Dec 2000 18:36:26 -0800
From: Stephen Samuel <samuel at bcgreen dot com>
Subject: Re: distributed mailboxes
The problem with the perdition test is that both machines are on
the same wire. This means that your limit is the ethernet.
At the very least, you should put each machine on it's own net,
(give the perdition box two ethernets), or put them on a 100MB
net so that you (well, hopefully) run out of cpu speed before
you run out of combined bandwidth.
If Bandwidth bandwidth isn't a limiting factor,I would expect a
perdition box to be only slightly worse than an extra router hop.
(slightly worse, since the packets have to go through user space).
Fergal Daly wrote:
>
> You could try
>
> http://www.us.vergenet.net/linux/perdition/
>
> I've tested it and it works, haven't used in a large scale environment but
> I'd imagine it works there too,
>
> Fergal
>
> On Thu, Dec 14, 2000 at 03:27:00PM +0100, Vladimir Nikolic wrote:
> > I have too many users, so I can't put their mailboxes on one host. What is
> > the best way for distribute them on several hosts?
--
Stephen Samuel +1(604)876-0426 samuel at bcgreen dot com
http://www.bcgreen.com/~samuel/
Powerful committed communication, reaching through fear, uncertainty and
doubt to touch the jewel within each person and bring it to life.
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 14 Dec 2000 18:59:49 -0800
Subject: Re: Anybody using DRAC with Qpopper
On Thu, 14 Dec 2000 20:34:23 -0500, Forrest Aldrich wrote:
>I'd like to see a more "print friendly" dumper of the dracd.db file...
Note that I'm just the packager. You might want to ask the DRAC
developer, Gary Mills. It looks like a Perl SMOP, but at present I
have almost no talent at Perl. (In the world of Open Source,
contributions are always welcome! ;-)
Just noticed that there's a "testing" app generated by the tarball that
I didn't include in my RPM. I just added it and uploaded it to Red Hat
as a -5 release, so it should appear on the RH mirrors in a couple of
days. I put the test app in /usr/sbin/testdrac. Syntax is "testdrac
server client-ip". It connects to the DRAC server and registers the
client IP, using the same API that qpopper does.
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
From: admin at radiks dot net
Date: Fri, 15 Dec 2000 09:01:12 -0600
Subject:
I am trying to get qpopper to show the incorrect password in the login
logging. I came across a 3.0.14b compiled version that was doing this, but
I could never find the configure settings to reproduce it. If anyone knows
please post, its used for tech support to help users. Any help is appreciated.
------
Jesse Ahrens
Systems Administrator
Radiks Internet Access
An Earthlink Company
Date: Fri, 15 Dec 2000 10:45:36 -0500
From: Joseph S D Yao <jsdy at cospo.osis dot gov>
Subject: Re: your mail
On Fri, Dec 15, 2000 at 09:01:12AM -0600, admin at radiks dot net wrote:
> I am trying to get qpopper to show the incorrect password in the login
> logging. I came across a 3.0.14b compiled version that was doing this, but
> I could never find the configure settings to reproduce it. If anyone knows
> please post, its used for tech support to help users. Any help is appreciated.
Doing this by default is a security issue. It's not a good idea. If
your help desk needs this, I would suggest having 'qpopper' look for a
list of usernames that require this service, and then have it output
the passwords used to another place (another file, a TTY 33) where they
can be destroyed after use.
--
Joe Yao jsdy at cospo.osis dot gov - Joseph S. D. Yao
COSPO/OSIS Computer Support EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.
Date: Sat, 16 Dec 2000 14:16:12 +0100 (CET)
From: Edwin <edwin at introweb dot nl>
Subject: Using quota
Hello,
Probably something that most people must recognize but I haven't come up
with any answer yet. (Tried sendmail FAQ, qpopper FAQ and some dejanews
searching).
We're using quota on our usermailboxes.
When they exceed it the mail is being bounced to the sender stating that
they're exceeding their quota.
When popping mail, qpopper will move the current mailbox to the tmpdrop.
Any mail received in the time of popping will be put in the mailbox.
So here's the problem.
When there's no quota on tmpdrop the mail will be copied, no problem.
The mail received in the mailbox will cause the total to be over the users
quota so mail won't be copied back to the mailbox.
Any new mail will be excepted because the mailbox hasn't exceeded the
quota (although added to the amount of space of the popdrop it does).
Putting both mailspool and tmpdrop on the same volume with the same quota
won't solve the problem because a user exceeding quota won't be able to
pop the mail.
Any solutions/suggestions would be appreciated.
Edwin Ringersma.
Date: Sat, 16 Dec 2000 18:37:34 +0100 (CET)
From: <fikser at irc.randmeer dot nl>
Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
how can i solve this:
From: Mail System Internal Data <MAILER-DAEMON at example dot com>
Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
#body
This text is part of the internal format of your mail folder, and is not
a real message. It is created automatically by the mail system software.
If deleted, important folder data will be lost, and it will be re-created
with the data reset to initial values.
end;
Nothing in the faqs about this... and i got this with every version i have
used with qpop.
Greetz Fiksah
From: Rick Pim <rick at post.queensu dot ca>
Date: Sat, 16 Dec 2000 11:34:15 -0500 (EST)
Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
> how can i solve this:
> From: Mail System Internal Data <MAILER-DAEMON at example dot com>
> Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
see the pine FAQ:
http://www.washington.edu/pine/faq/index.html
rp
Date: Sat, 16 Dec 2000 08:37:03 -0800 (PST)
From: Kevin McKinnon <kevin at sunshinecable dot com>
Subject: Re: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
On Sat, 16 Dec 2000 fikser at irc.randmeer dot nl wrote:
> how can i solve this:
> From: Mail System Internal Data <MAILER-DAEMON at example dot com>
> Subject: DON'T DELETE THIS MESSAGE -- FOLDER INTERNAL DATA
>
> #body
> This text is part of the internal format of your mail folder, and is not
> a real message. It is created automatically by the mail system software.
> If deleted, important folder data will be lost, and it will be re-created
> with the data reset to initial values.
> end;
>
> Nothing in the faqs about this... and i got this with every version i have
> used with qpop.
From the INSTALL file:
--enable-uw-kludge Checks for and hides UW IMAP status message.
So if you configure with: ./configure --enable-uw-kludge
the message will still exist but will be hidden from the user.
Cheers,
Kev
Date: Sun, 17 Dec 2000 14:58:54 +1300 (NZDT)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Using quota
On Sat, 16 Dec 2000, Edwin wrote:
> When there's no quota on tmpdrop the mail will be copied, no problem.
> The mail received in the mailbox will cause the total to be over the users
> quota so mail won't be copied back to the mailbox.
> Any new mail will be excepted because the mailbox hasn't exceeded the
> quota (although added to the amount of space of the popdrop it does).
>
> Putting both mailspool and tmpdrop on the same volume with the same quota
> won't solve the problem because a user exceeding quota won't be able to
> pop the mail.
>
> Any solutions/suggestions would be appreciated.
Linux quotas have soft and hard limits.
Set the hard limit to at least twice the soft limit and the problem
won't occur.
AB
Date: Sun, 17 Dec 2000 12:15:45 -0800
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Logging Output ?
At 10:57 AM -0500 12/6/00, Jack Sasportas wrote:
> Can someone tell me in what code file the routine that outputs the data
> to the log file is ?
popper/pop_log.c
Date: Sun, 17 Dec 2000 12:17:57 -0800
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Relocating the dropbox - LAST UPD
At 9:15 AM -0800 12/6/00, Gavin Goldsmith wrote:
> Compiled and installed 3.0.2 and we're flying by comparison!!!
>
> Thnx again.
>
> Gavin
Glad to hear it. I'd still recommend upgrading to 3.1.2, but that's
not as urgent as going from 2.x to 3.x.
Date: Sun, 17 Dec 2000 12:15:08 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: bulldb
At 9:57 PM +0100 12/5/00, guenter wessling wrote:
> Hi, all. Enthusiasm was too early....
> For some reason the bulletins don«t work. (Linux 2036)
> popper creates bulldb all right when a user asks for mail.
> But the bullis don«t show up.
> Settings:
> /var/spool/bulls root mail 755
> files inside:
> 0001.bulletin.....0004.bulletin root mail 644
> bulldb.dir and bulldb.pag root mail 644
> popper and popauth root root 755 (popauth works perfectly; is 755 a
> security risk ?)
> bulldb is created by popper as root root 600.
> The messages have the proposed header, one blank line to message body.
> Is this a 2000-problem ??
>
> I configured --enable-bulletins and --enable-bulldb
> Compiled just like that.
>
> Any ideas ?
>
> guenter
> guenter wessling (hypnose at t-online dot de)
What do you mean the bulletins "don't work"?
If you suspect a Qpopper problem, try turning on tracing. A trace
should show Qpopper finding the bulletins, determining which
bulletins a user has seen, and therefore which are new and should be
added
Date: Sun, 17 Dec 2000 12:27:13 -0800
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: how do i use both apop + clear text passwords
At 3:09 PM +0000 12/8/00, Wasim Bashir wrote:
> Hi,
>
> my qpopper only allow users to pick up email with apop... i want to
> know how do i get qpopper to accept both apop and clear text passwords...
>
> the way i see it... if i take out a user from the popauth database...
> shouldn't qpopper allow the user taken out of the database to use clear text
> passwords ? every time i do this i keep getting authentication failure
> errors because the user isn't in the popauth database, even though the
> apop option isn't ticked.
By default, Qpopper forces users who are in the APOP database to use
APOP and not clear text passwords. Likewise, by default, Qpopper
permits clear text passwords for users who are not in the APOP
database. If you are seeing different behavior, perhaps you are
using the '-p' command-line or 'clear-text-password' configuration
file option?
If you are sure you are not changing the default behavior, and are
seeing different results (for example, users
Date: Sun, 17 Dec 2000 12:21:41 -0800
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Maildir - not enoug help
At 12:44 AM +0100 12/7/00, Radek Michalski wrote:
> Hi!
>
> I'm using Qpopper one week, and my question is:
> Qpoper wants to use /var/spool/mail/ directory, but on my distributon, mail
> comes to $HOME/mail/(user_name-file). In help I've found an
> option --enable-home-dir=*
> But I think, that that option doesnt help my in nmy situation, cause the
> mailfile is called (user) and in mail directory, not Mailbox - how should I
> configure my Qpopper (use this $HOME/mail/user) or Linux to redirect mail to
> /var/spool/mail? FAQ doenst help my...
>
> Best regards, Radek (M)
You should be able to use '--enable-home-dir-mail' with ./configure.
If the spool file in the user's home directory has a variable name
(for example the user's name) then this won't work. I'd suggest
configuring your local delivery agent to either use a fixed file name
in the user's home directory (such as the common '.mail') or to use a
spool file in the spool directory.
Date: Mon, 18 Dec 2000 00:06:21 -0600
From: Ron Calzone <ron at cze dot com>
Subject: Qpop / sendmail 8.9.2 and Netscape Messenger
We have just upgraded to Qpopper 3.0.2 and sendmail 8.9.2 - they
are running on a Sparc with Solaris 2.5.1
Clients on our lan are running Netscape Messenger 4.7 email
programs. All PCs have the same sub-net mask and sendmail is
configured to accept all mail from that sub-net mask.
PROBLEM:
Although we used to be able to send mail to our unix mail server
(running qpopper) at any time and the mail would sit in the queue
until an internet connection was established, we now must be
online for the mail to even be sent from the PCs to the unix
email server.
I imagine that this is due to an authentication procedure, and is
probably a sendmail configuration issue, but I am hoping that
someone might have some ideas.....
- Ron
Date: Mon, 18 Dec 2000 09:20:43 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: Qpop / sendmail 8.9.2 and Netscape Messenger
on Mon, Dec 18, 2000 at 12:06:21AM -0600, Ron Calzone wrote:
> We have just upgraded to Qpopper 3.0.2 and sendmail 8.9.2 - they
> are running on a Sparc with Solaris 2.5.1
Why not run Sendmail 8.8.7 and Solaris 2.4 with qpopper 2.53? That
combination worked well for me for quite some time back in 1997...
FWIW, anything below sendmail 8.9.3 is an invitation to spammers
that you want to be abused as an open relay.
Steve
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
Date: Mon, 18 Dec 2000 09:18:02 -0600
From: Ron Calzone <ron at cze dot com>
Subject: Re: Qpop / sendmail 8.9.2 and Netscape Messenger
Steve,
I just switched from sendmail 8.8 because my ISP would no longer tolerate
the invitation to spammers. They changed their system to deny access to
anyone with open relays without telling their user base!
- Ron
Steven Champeon wrote:
> on Mon, Dec 18, 2000 at 12:06:21AM -0600, Ron Calzone wrote:
> > We have just upgraded to Qpopper 3.0.2 and sendmail 8.9.2 - they
> > are running on a Sparc with Solaris 2.5.1
>
> Why not run Sendmail 8.8.7 and Solaris 2.4 with qpopper 2.53? That
> combination worked well for me for quite some time back in 1997...
>
> FWIW, anything below sendmail 8.9.3 is an invitation to spammers
> that you want to be abused as an open relay.
>
> Steve
>
> --
Date: Mon, 18 Dec 2000 10:21:06 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: Qpop / sendmail 8.9.2 and Netscape Messenger
on Mon, Dec 18, 2000 at 09:18:02AM -0600, Ron Calzone wrote:
> I just switched from sendmail 8.8 because my ISP would no longer tolerate
> the invitation to spammers. They changed their system to deny access to
> anyone with open relays without telling their user base!
Why didn't you upgrade to 8.11 or even 8.10? Just curious.
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
Date: Tue, 19 Dec 2000 04:34:19 +1300 (NZDT)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Qpop / sendmail 8.9.2 and Netscape Messenger
On Mon, 18 Dec 2000, Ron Calzone wrote:
> Steve,
>
> I just switched from sendmail 8.8 because my ISP would no longer tolerate
> the invitation to spammers. They changed their system to deny access to
> anyone with open relays without telling their user base!
Sendmail 8.9 is basically no longer supported
Why on earth did you update to 8.9 instead of 8.12?
FWIW, 8.12 supports Authenticated SMTP, which removes all problems with
roaming users whose clients support the protocol extension (which is
nearly all the current crop of Windoze software, for starters).
AB
From: "John MacKenzie" <john at elehost dot com>
Subject: DNS lookup
Date: Mon, 18 Dec 2000 12:56:36 -0500
<snip from FAQ>
How do I disable DNS lookups at run-time?
Normally, qpopper attempts a reverse-lookup on the client IP address
when a connection is made. You can prevent this by adding the -R option
to the inetd.conf line which invokes qpopper. For example:
pop3 tcp /usr/local/lib/qpopper qpopper -sR
When this is done, the log file repeats the client IP address twice,
instead of the canonical name following the IP address.
You might want to do this on systems that have a high load, to avoid the
overhead of the DNS lookups. You might also want to do this if the
information is simply not useful or desired.
<snip>
I was wondering if it is possible to turn off the lookup for just
certain IP addresses? or is it all or nothing?
Thanks
John
Date: Mon, 18 Dec 2000 15:39:30 -0600
Subject: NEW USER of Qpopper
From: Robert Brandtjen <rob at prometheusmedia dot com>
Umm, not to sound to dumb, but how does one go about administering this
[product ? I have it installed, and set up in my inetd.conf, now what ? I
cant find anything on it in the docs.
OS= OS X Server
TIA - Rob
--
Web Site Creation and Hosting Services
Hostmaster at prometheusmedia dot com
www.prometheusmedia.com
Date: Mon, 18 Dec 2000 16:52:05 -0500
From: Steven Champeon <schampeo at hesketh dot com>
Subject: Re: NEW USER of Qpopper
on Mon, Dec 18, 2000 at 03:39:30PM -0600, Robert Brandtjen wrote:
> Umm, not to sound to dumb, but how does one go about administering this
> [product ? I have it installed, and set up in my inetd.conf, now what ? I
> cant find anything on it in the docs.
Are you perfectly clear on what popper does? popper simply allows
remote access to local UNIX mailboxes via the Post Office protocol
(POP). What sort of "administration" did you expect? It relies on a
mail transfer agent such as sendmail to deliver the mail to the local
user's spool file, it uses whatever form of authentication you want
(from PAM to /etc/passwd to /etc/pop.auth) and logs to the system log.
There's not much else beyond that, unless you're in a special case
(such as where you need DRAC for dynamic relay authorization, which
is becoming less common, want to provide a mechanism whereby users
can change their passwords remotely, or other esoterica).
Or, by "administering" do you mean "getting it working to begin with"?
Steve
--
tired of being an underappreciated functionary in a soulless machine?
hesketh.com is hiring: http://www.hesketh.com/careers/
Date: Tue, 19 Dec 2000 18:03:01 -0800
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Using quota
I'd suggest enabling server mode, to avoid the spool copy and
emptying of the main spool at the session start.
Date: Wed, 20 Dec 2000 12:10:56 +0000
From: James <james at host365 dot com>
Subject: Obviously I have an error!
Hi all.
I should start this (my first post) with a big howdy doo dee to everyone.
I have just installed a new machine to act a as mailsever, replacing one
that continually tripped itself over. I had qpopper 3.0.2 running on that
one fine. On the new box, I can't get qpopper to create the .pop file
correctly. The exact error is:
There has been an error transferring your mail. I said: PASS <shhhh!
Don't tell anyone> and then the POP server (user at domain dot net) said: ERR
[SYS/TEMP] Failed to create /var/spool/mail/.user.pop with uid 3965, gid
12. Change permissions.
Now the weird part is that on the old server some of the e-mail account had
a group id of '2000' and some were group 'root' both of them worked
regardless. This time instead of having group of '2000' they have got
'unknown_' instead. The stranger part is that half of the e-mail accounts
work and half of them don't. For example user1 and user2 both have a group
id of 'unknown_' and user1 can check his mail successfully but user2 gets
the error message generated above.
I am completely stumped here.....has anyone seen anything like this before?
Any help is greatly appreciated....
James.
From: "Edwin Ringersma" <edwin at introweb dot nl>
Date: Wed, 20 Dec 2000 14:57:09 +0100
Subject: Re: Using quota
After suggestion of someone on this list (thanks!)
I've put soft limits to the limit we had on the mail.
The hard limit is over twice that size.
Looks fine. qpopper is able to put the mail back in the spooldir.
I'm now waiting to see what happens if someone is over their grace
period. (or maybe somebody on this list knows?)
> I'd suggest enabling server mode, to avoid the spool copy and
> emptying of the main spool at the session start.
>
Met vriendelijke groeten,
Edwin Ringersma
--------------------------------------------------------
IntroWeb Postbus 724 7550 AS Hengelo
Tel: 074 - 243 01 05 Welbergweg 30
Fax: 074 - 242 98 95 7556 PE Hengelo
http://www.introweb.nl
--------------------------------------------------------
Internet Access & Zakelijke Internet Toepassingen
--------------------------------------------------------
Date: Wed, 20 Dec 2000 03:19:39 -0600 (CST)
From: Ricky Crow <rickyc at thenew.gamesbbs dot com>
Subject: Serious problem....
I have a relatively active mail server that runs qpopper for POP3 service.
I have been using an old version of 2.xx for a long time, and didn't even
realize there were vulnerabilities with it until I was doing some research
on a problem I am having.
Apparently, my server is getting attacked, and I cannot figure out how to
remedy the situation. The old version of Qpopper had been running
FLAWLESSLY for the last 3-4 years with using inetd to start it up.
Recently, I have been having problems where nobody can connect to my POP3
server, and it just sits there and hangs until the connection times out.
The (temporary) solution is to kill off inetd and restart it. 5-10
minutes later, it does the same thing over again, where nobody can connect
to the POP3 server.
Next, I downloaded the newest version of Qpopper from the Eudora site
yesterday, compiled it up and started it up just fine. I compiled it in
daemon mode, just because it actually seems to run faster that way on my
system, and the SAME EXACT PROBLEM happens. I can start up qpopper by
issuing a "qpopper -S" command, and it runs in server mode... Then less
than 5 minutes later, it will not take any incoming connections.
Somebody, PLEASE help me figure this out. My customers are getting very
irritated over this whole thing and I cannot figure it out. I also have
better things to do than to sit in front of the terminal and restart my
POP3 server every 5-10 minutes throughout the day.
(The strangest thing is that the server worked fine all last night,
throughout the night, and worked fine this morning until about 8:30am...
It starts "crapping out" at the same time every day, these last 3 days or
so).
Ricky
Date: Thu, 21 Dec 2000 00:37:19 +0900
From: Peter Evans <peter at gol dot com>
Subject: Re: Serious problem....
Ricky Crow (rickyc at thenew.gamesbbs dot com) wrote:
lots. But no actual information ^^;
1 - what OS are you running, have you locked down any of the
non-essential crap that things like redhat/solaris
and the likes come with?
2 - when it craps out (for want of a better word) what else is the
system doing? Commands that may help you here:
top
iostat
netstat
ps -ef (-auxww or whatever)
lsof
These should give you hints about things like resource-starvation,
strange crap and so on.
3 - look in the system logs for clues.
This is probably number 2a, not 3.
Peter
----*
There, that should get you looking in the right direction.
It could be something as simple as "not using server-mode/
noupdateonabort/nostatus and having allowed your lusers to
build up 900 mb mailboxes."
Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
without so much as a hiccup. so I suspect soemthing silly.
--
Remember The 5 K's. The Justified Agents of Munya-munya-muuuu ...
Date: Wed, 20 Dec 2000 09:53:07 -0600 (CST)
From: Ricky Crow <rickyc at thenew.gamesbbs dot com>
Subject: Re: Serious problem....
On Thu, 21 Dec 2000, Peter Evans wrote:
> lots. But no actual information ^^;
>
>
> 1 - what OS are you running, have you locked down any of the
> non-essential crap that things like redhat/solaris
> and the likes come with?
Running BSD/OS 2.01... Yes, I know it's old, but it has been extremely
stable over the last 4-5 years on the same machine.
Yes, the system has been locked down, as well.
> 2 - when it craps out (for want of a better word) what else is the
> system doing? Commands that may help you here:
>
> top
Nothing really serious or unusual, here... I am experiencing the problem
as of right now, and here's what top shows:
load averages: 0.46, 0.41, 0.36
09:43:37
90 processes: 2 running, 88 sleeping
Cpu states: 2.0% user, 0.0% nice, 3.0% system, 0.0% interrupt, 95.0%
idle
Memory: Real: 15M/32M Virt: 78M/254M Free: 72M
PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
12362 root 2 0 5184K 5084K sleep 1:37 1.61% 1.61% named
23724 root 2 0 1148K 1040K sleep 0:00 6.00% 0.29% sendmail
23721 root 28 0 256K 444K run 0:00 1.40% 0.20% top
23325 nobody 2 0 1900K 972K sleep 0:00 0.10% 0.10% httpd
23656 nobody 2 0 1900K 944K sleep 0:00 0.05% 0.05% httpd
19761 root 2 0 1044K 260K sleep 0:05 0.05% 0.05% sendmail
23131 root 28 0 536K 388K run 0:00 0.00% 0.00% ftpd
1991 root 18 0 1876K 1000K sleep 0:24 0.00% 0.00% httpd
15981 rickyc 18 0 592K 764K sleep 0:00 0.00% 0.00% tcsh
17909 root 18 0 584K 744K sleep 0:00 0.00% 0.00% tcsh
19574 root 18 0 540K 704K sleep 0:00 0.00% 0.00% tcsh
15159 rickyc 18 0 536K 660K sleep 0:00 0.00% 0.00% tcsh
13145 rickyc 18 0 536K 652K sleep 0:00 0.00% 0.00% tcsh
126 root 18 -12 352K 416K sleep 0:00 0.00% 0.00% xntpd
2099 root 18 0 340K 220K sleep 0:02 0.00% 0.00% cron
> iostat
ns1: {44} % iostat
tty sd0 sd1 sd2 sd3
cpu
tin tout sps tps msps sps tps msps sps tps msps sps tps msps us ni sy
id
0 38 87 3 4.9 0 0 5.0 0 0 0.0 351 24 3.8 8 0 21
0 71
I don't know EXACTLY what all of that means on iostat, but that's what it
shows right now, too.
> netstat
There is nothing unusual in there....and no connections on port 110 right
now, either.
> ps -ef (-auxww or whatever)
Nothing unusual.. There are probably too many processes listed to copy
and paste into this email, but there isn't anything that makes me
suspicious or looks unusual.
> lsof
I don't have that command on this machine for some reason......
> These should give you hints about things like resource-starvation,
> strange crap and so on.
Nothing strange... Can't figure this out... Any other ideas?
> 3 - look in the system logs for clues.
>
> This is probably number 2a, not 3.
Been looking in the logs....even doing a tail -f to watch the log as it's
happening, then I keep testing mail in another window and waiting for it
to "crap out" and nothing.... Nothing unusual. No inetd messages telling
me that it is shutting down that service or anything.... It's frustrating
me to no end.
> There, that should get you looking in the right direction.
> It could be something as simple as "not using server-mode/
> noupdateonabort/nostatus and having allowed your lusers to
> build up 900 mb mailboxes."
We have a few people with mailboxes approaching 10 megs on the system, but
by and large, we don't have all that many that get that big.
> Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
> without so much as a hiccup. so I suspect soemthing silly.
Damn.... I wish I could say that.....
I've only got a couple of thousand on this box, and it's giving me fits.
Ricky
Date: Wed, 20 Dec 2000 09:51:58 -0600
From: Ron Calzone <ron at cze dot com>
Subject: Bind compile under gcc?
I need to compile Bind with gcc running Solaris 2.5.1 - has
anyone done this successfully?
The docs for the latest beta say that gcc is not supported and it
crashed when I tried it.
- Ron
Date: Thu, 21 Dec 2000 05:08:28 +1300 (NZDT)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Using quota
On Wed, 20 Dec 2000, Edwin Ringersma wrote:
> After suggestion of someone on this list (thanks!)
> I've put soft limits to the limit we had on the mail.
> The hard limit is over twice that size.
> Looks fine. qpopper is able to put the mail back in the spooldir.
> I'm now waiting to see what happens if someone is over their grace
> period. (or maybe somebody on this list knows?)
Once the grace period expires, the problems will resume. I advise
setting it to a short period and making sure that the quota daemon is
set up to mail people who go overquota.
AB
From: "Peter R. Hubberstey" <peter at ukip dot com>
Subject: RE: Serious problem....
Date: Wed, 20 Dec 2000 16:31:56 -0000
Am I right in thinking you are running apache, sendmail AND pop with a
machine with only 32 MB of RAM ? how many users do you expect this to serve
? one ;-)
I would be inclined to up the amount of physical RAM you have since I think
running in daemon mode requires more memory.
Also it's a newer version.... so more memory used again.
You're swapping quite a bit, but check your paging - you can use 'procinfo'
for this. Page out is usually bad I think.
I am sure this will be a contributory factor if not THE reason!
-----Original Message-----
From: Ricky Crow [mailto:rickyc at thenew.gamesbbs dot com]
Sent: 20 December 2000 15:53
To: Peter Evans
Cc: Subscribers of Qpopper
Subject: Re: Serious problem....
On Thu, 21 Dec 2000, Peter Evans wrote:
> lots. But no actual information ^^;
>
>
> 1 - what OS are you running, have you locked down any of the
> non-essential crap that things like redhat/solaris
> and the likes come with?
Running BSD/OS 2.01... Yes, I know it's old, but it has been extremely
stable over the last 4-5 years on the same machine.
Yes, the system has been locked down, as well.
> 2 - when it craps out (for want of a better word) what else is the
> system doing? Commands that may help you here:
>
> top
Nothing really serious or unusual, here... I am experiencing the problem
as of right now, and here's what top shows:
load averages: 0.46, 0.41, 0.36
09:43:37
90 processes: 2 running, 88 sleeping
Cpu states: 2.0% user, 0.0% nice, 3.0% system, 0.0% interrupt, 95.0%
idle
Memory: Real: 15M/32M Virt: 78M/254M Free: 72M
PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
12362 root 2 0 5184K 5084K sleep 1:37 1.61% 1.61% named
23724 root 2 0 1148K 1040K sleep 0:00 6.00% 0.29% sendmail
23721 root 28 0 256K 444K run 0:00 1.40% 0.20% top
23325 nobody 2 0 1900K 972K sleep 0:00 0.10% 0.10% httpd
23656 nobody 2 0 1900K 944K sleep 0:00 0.05% 0.05% httpd
19761 root 2 0 1044K 260K sleep 0:05 0.05% 0.05% sendmail
23131 root 28 0 536K 388K run 0:00 0.00% 0.00% ftpd
1991 root 18 0 1876K 1000K sleep 0:24 0.00% 0.00% httpd
15981 rickyc 18 0 592K 764K sleep 0:00 0.00% 0.00% tcsh
17909 root 18 0 584K 744K sleep 0:00 0.00% 0.00% tcsh
19574 root 18 0 540K 704K sleep 0:00 0.00% 0.00% tcsh
15159 rickyc 18 0 536K 660K sleep 0:00 0.00% 0.00% tcsh
13145 rickyc 18 0 536K 652K sleep 0:00 0.00% 0.00% tcsh
126 root 18 -12 352K 416K sleep 0:00 0.00% 0.00% xntpd
2099 root 18 0 340K 220K sleep 0:02 0.00% 0.00% cron
> iostat
ns1: {44} % iostat
tty sd0 sd1 sd2 sd3
cpu
tin tout sps tps msps sps tps msps sps tps msps sps tps msps us ni sy
id
0 38 87 3 4.9 0 0 5.0 0 0 0.0 351 24 3.8 8 0 21
0 71
I don't know EXACTLY what all of that means on iostat, but that's what it
shows right now, too.
> netstat
There is nothing unusual in there....and no connections on port 110 right
now, either.
> ps -ef (-auxww or whatever)
Nothing unusual.. There are probably too many processes listed to copy
and paste into this email, but there isn't anything that makes me
suspicious or looks unusual.
> lsof
I don't have that command on this machine for some reason......
> These should give you hints about things like resource-starvation,
> strange crap and so on.
Nothing strange... Can't figure this out... Any other ideas?
> 3 - look in the system logs for clues.
>
> This is probably number 2a, not 3.
Been looking in the logs....even doing a tail -f to watch the log as it's
happening, then I keep testing mail in another window and waiting for it
to "crap out" and nothing.... Nothing unusual. No inetd messages telling
me that it is shutting down that service or anything.... It's frustrating
me to no end.
> There, that should get you looking in the right direction.
> It could be something as simple as "not using server-mode/
> noupdateonabort/nostatus and having allowed your lusers to
> build up 900 mb mailboxes."
We have a few people with mailboxes approaching 10 megs on the system, but
by and large, we don't have all that many that get that big.
> Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
> without so much as a hiccup. so I suspect soemthing silly.
Damn.... I wish I could say that.....
I've only got a couple of thousand on this box, and it's giving me fits.
Ricky
Date: Wed, 20 Dec 2000 11:34:20 -0500 (EST)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Bind compile under gcc?
wrong mailing list, try isp-dns at isp-dns dot com
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Wed, 20 Dec 2000, Ron Calzone wrote:
> I need to compile Bind with gcc running Solaris 2.5.1 - has
> anyone done this successfully?
>
> The docs for the latest beta say that gcc is not supported and it
> crashed when I tried it.
>
> - Ron
>
>
>
>
Date: Wed, 20 Dec 2000 12:12:09 -0500
From: Theresa M Peter <theresa at email.uc dot edu>
Subject: Re: Using quota
One thing that we have discovered is no matter how many times we email
individuals to inform them that they are using 80% of their soft quota or
are over quota, they don't fix it. In our email message we are very
explicit on how to resolve this issue. I believe we are going to be moving
to not allow those individuals who are over quota to send mail. One other
thing we are contemplating is forcing Qpopper to dump all mail that is
older than 3 months when people check their mail.
One thing that I have noticed with UNIX quotas, is that they often get out
of synch with how much disk space is actually being used by the user. What
we have done is resynch the file systems quota table weekly at the same
time we check individual's quota and mail them their warning message. We
also have tweaked the error messages in Popper so that they are supposed to
call our helpdesk when they are over quota, while this has helped slightly,
I still have over 2000 users who are overquota.
At 05:08 AM 12/21/00 +1300, Alan Brown wrote:
>On Wed, 20 Dec 2000, Edwin Ringersma wrote:
>
> > After suggestion of someone on this list (thanks!)
> > I've put soft limits to the limit we had on the mail.
> > The hard limit is over twice that size.
> > Looks fine. qpopper is able to put the mail back in the spooldir.
> > I'm now waiting to see what happens if someone is over their grace
> > period. (or maybe somebody on this list knows?)
>
>Once the grace period expires, the problems will resume. I advise
>setting it to a short period and making sure that the quota daemon is
>set up to mail people who go overquota.
>
>AB
Date: Wed, 20 Dec 2000 10:34:26 -0600 (CST)
From: Ricky Crow <rickyc at thenew.gamesbbs dot com>
Subject: RE: Serious problem....
Well, BSDI's reporting on "top" is crap. The box actually has 128mb of
RAM on it... I don't think it's really swapping as much as it shows,
either.
Ricky
On Wed, 20 Dec 2000, Peter R. Hubberstey wrote:
> Am I right in thinking you are running apache, sendmail AND pop with a
> machine with only 32 MB of RAM ? how many users do you expect this to serve
> ? one ;-)
>
> I would be inclined to up the amount of physical RAM you have since I think
> running in daemon mode requires more memory.
>
> Also it's a newer version.... so more memory used again.
>
> You're swapping quite a bit, but check your paging - you can use 'procinfo'
> for this. Page out is usually bad I think.
>
> I am sure this will be a contributory factor if not THE reason!
>
>
>
>
> -----Original Message-----
> From: Ricky Crow [mailto:rickyc at thenew.gamesbbs dot com]
> Sent: 20 December 2000 15:53
> To: Peter Evans
> Cc: Subscribers of Qpopper
> Subject: Re: Serious problem....
>
>
>
>
> On Thu, 21 Dec 2000, Peter Evans wrote:
>
> > lots. But no actual information ^^;
> >
> >
> > 1 - what OS are you running, have you locked down any of the
> > non-essential crap that things like redhat/solaris
> > and the likes come with?
>
> Running BSD/OS 2.01... Yes, I know it's old, but it has been extremely
> stable over the last 4-5 years on the same machine.
> Yes, the system has been locked down, as well.
>
> > 2 - when it craps out (for want of a better word) what else is the
> > system doing? Commands that may help you here:
> >
> > top
>
> Nothing really serious or unusual, here... I am experiencing the problem
> as of right now, and here's what top shows:
>
>
> load averages: 0.46, 0.41, 0.36
> 09:43:37
> 90 processes: 2 running, 88 sleeping
> Cpu states: 2.0% user, 0.0% nice, 3.0% system, 0.0% interrupt, 95.0%
> idle
> Memory: Real: 15M/32M Virt: 78M/254M Free: 72M
>
> PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
> 12362 root 2 0 5184K 5084K sleep 1:37 1.61% 1.61% named
> 23724 root 2 0 1148K 1040K sleep 0:00 6.00% 0.29% sendmail
> 23721 root 28 0 256K 444K run 0:00 1.40% 0.20% top
> 23325 nobody 2 0 1900K 972K sleep 0:00 0.10% 0.10% httpd
> 23656 nobody 2 0 1900K 944K sleep 0:00 0.05% 0.05% httpd
> 19761 root 2 0 1044K 260K sleep 0:05 0.05% 0.05% sendmail
> 23131 root 28 0 536K 388K run 0:00 0.00% 0.00% ftpd
> 1991 root 18 0 1876K 1000K sleep 0:24 0.00% 0.00% httpd
> 15981 rickyc 18 0 592K 764K sleep 0:00 0.00% 0.00% tcsh
> 17909 root 18 0 584K 744K sleep 0:00 0.00% 0.00% tcsh
> 19574 root 18 0 540K 704K sleep 0:00 0.00% 0.00% tcsh
> 15159 rickyc 18 0 536K 660K sleep 0:00 0.00% 0.00% tcsh
> 13145 rickyc 18 0 536K 652K sleep 0:00 0.00% 0.00% tcsh
> 126 root 18 -12 352K 416K sleep 0:00 0.00% 0.00% xntpd
> 2099 root 18 0 340K 220K sleep 0:02 0.00% 0.00% cron
>
>
> > iostat
>
> ns1: {44} % iostat
> tty sd0 sd1 sd2 sd3
> cpu
> tin tout sps tps msps sps tps msps sps tps msps sps tps msps us ni sy
> id
> 0 38 87 3 4.9 0 0 5.0 0 0 0.0 351 24 3.8 8 0 21
> 0 71
>
>
> I don't know EXACTLY what all of that means on iostat, but that's what it
> shows right now, too.
>
> > netstat
>
> There is nothing unusual in there....and no connections on port 110 right
> now, either.
>
> > ps -ef (-auxww or whatever)
>
> Nothing unusual.. There are probably too many processes listed to copy
> and paste into this email, but there isn't anything that makes me
> suspicious or looks unusual.
>
> > lsof
>
> I don't have that command on this machine for some reason......
>
> > These should give you hints about things like resource-starvation,
> > strange crap and so on.
>
> Nothing strange... Can't figure this out... Any other ideas?
>
> > 3 - look in the system logs for clues.
> >
> > This is probably number 2a, not 3.
>
> Been looking in the logs....even doing a tail -f to watch the log as it's
> happening, then I keep testing mail in another window and waiting for it
> to "crap out" and nothing.... Nothing unusual. No inetd messages telling
> me that it is shutting down that service or anything.... It's frustrating
> me to no end.
>
>
> > There, that should get you looking in the right direction.
> > It could be something as simple as "not using server-mode/
> > noupdateonabort/nostatus and having allowed your lusers to
> > build up 900 mb mailboxes."
>
> We have a few people with mailboxes approaching 10 megs on the system, but
> by and large, we don't have all that many that get that big.
>
> > Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
> > without so much as a hiccup. so I suspect soemthing silly.
>
> Damn.... I wish I could say that.....
> I've only got a couple of thousand on this box, and it's giving me fits.
>
> Ricky
>
>
>
>
Date: Wed, 20 Dec 2000 09:56:08 -0800 (PST)
From: Sergiy Zhuk <serge at yahoo-inc dot com>
Subject: Re: Using quota
hi
On Wed, 20 Dec 2000, Theresa M Peter wrote:
> One thing that we have discovered is no matter how many times we email
> individuals to inform them that they are using 80% of their soft quota or
> are over quota, they don't fix it. In our email message we are very
Run an expiration script, remove retrieved messages in <N> days and notify
the user.
Switch to qmail-pop3d with Maildir - works much better than qpopper and the
expiration is as simple as running 'find' with [-atime] [-delete].
--
rgds,
serge
Date: Wed, 20 Dec 2000 16:34:09 +0000
From: peter.allen at moon-light.co dot uk
Subject: Re: Serious problem....
If you *may* have been hacked at some stage in the past, are you now sure
that you have non-trojaned version of those tests such as top, netstat etc.
It may be worthwhile checking your current ones against the original
binaries (or what you think you should have) just in case. For future
reference TripWire is useful for this. You could also scan from the
outside using nmap or similar to see what ports appear open.
lsof is a worthwhile tool and may be obtained from
http://www.stokely.com/unix.sysadm.resources/shareware.www.html
HTH
Peter
At 09:53 20/12/2000 -0600, Ricky Crow wrote:
>
>
>On Thu, 21 Dec 2000, Peter Evans wrote:
>
>> lots. But no actual information ^^;
>>
>>
>> 1 - what OS are you running, have you locked down any of the
>> non-essential crap that things like redhat/solaris
>> and the likes come with?
>
>Running BSD/OS 2.01... Yes, I know it's old, but it has been extremely
>stable over the last 4-5 years on the same machine.
>Yes, the system has been locked down, as well.
>
>> 2 - when it craps out (for want of a better word) what else is the
>> system doing? Commands that may help you here:
>>
>> top
>
>Nothing really serious or unusual, here... I am experiencing the problem
>as of right now, and here's what top shows:
>
>
>load averages: 0.46, 0.41, 0.36
>09:43:37
>90 processes: 2 running, 88 sleeping
>Cpu states: 2.0% user, 0.0% nice, 3.0% system, 0.0% interrupt, 95.0%
>idle
>Memory: Real: 15M/32M Virt: 78M/254M Free: 72M
>
> PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
>12362 root 2 0 5184K 5084K sleep 1:37 1.61% 1.61% named
>23724 root 2 0 1148K 1040K sleep 0:00 6.00% 0.29% sendmail
>23721 root 28 0 256K 444K run 0:00 1.40% 0.20% top
>23325 nobody 2 0 1900K 972K sleep 0:00 0.10% 0.10% httpd
>23656 nobody 2 0 1900K 944K sleep 0:00 0.05% 0.05% httpd
>19761 root 2 0 1044K 260K sleep 0:05 0.05% 0.05% sendmail
>23131 root 28 0 536K 388K run 0:00 0.00% 0.00% ftpd
> 1991 root 18 0 1876K 1000K sleep 0:24 0.00% 0.00% httpd
>15981 rickyc 18 0 592K 764K sleep 0:00 0.00% 0.00% tcsh
>17909 root 18 0 584K 744K sleep 0:00 0.00% 0.00% tcsh
>19574 root 18 0 540K 704K sleep 0:00 0.00% 0.00% tcsh
>15159 rickyc 18 0 536K 660K sleep 0:00 0.00% 0.00% tcsh
>13145 rickyc 18 0 536K 652K sleep 0:00 0.00% 0.00% tcsh
> 126 root 18 -12 352K 416K sleep 0:00 0.00% 0.00% xntpd
> 2099 root 18 0 340K 220K sleep 0:02 0.00% 0.00% cron
>
>
>> iostat
>
>ns1: {44} % iostat
> tty sd0 sd1 sd2 sd3
>cpu
> tin tout sps tps msps sps tps msps sps tps msps sps tps msps us ni sy
>id
> 0 38 87 3 4.9 0 0 5.0 0 0 0.0 351 24 3.8 8 0 21
>0 71
>
>
>I don't know EXACTLY what all of that means on iostat, but that's what it
>shows right now, too.
>
>> netstat
>
>There is nothing unusual in there....and no connections on port 110 right
>now, either.
>
>> ps -ef (-auxww or whatever)
>
>Nothing unusual.. There are probably too many processes listed to copy
>and paste into this email, but there isn't anything that makes me
>suspicious or looks unusual.
>
>> lsof
>
>I don't have that command on this machine for some reason......
>
>> These should give you hints about things like resource-starvation,
>> strange crap and so on.
>
>Nothing strange... Can't figure this out... Any other ideas?
>
>> 3 - look in the system logs for clues.
>>
>> This is probably number 2a, not 3.
>
>Been looking in the logs....even doing a tail -f to watch the log as it's
>happening, then I keep testing mail in another window and waiting for it
>to "crap out" and nothing.... Nothing unusual. No inetd messages telling
>me that it is shutting down that service or anything.... It's frustrating
>me to no end.
>
>
>> There, that should get you looking in the right direction.
>> It could be something as simple as "not using server-mode/
>> noupdateonabort/nostatus and having allowed your lusers to
>> build up 900 mb mailboxes."
>
>We have a few people with mailboxes approaching 10 megs on the system, but
>by and large, we don't have all that many that get that big.
>
>> Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
>> without so much as a hiccup. so I suspect soemthing silly.
>
>Damn.... I wish I could say that.....
>I've only got a couple of thousand on this box, and it's giving me fits.
>
>Ricky
>
Date: Wed, 20 Dec 2000 14:07:48 -0500 (EST)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Using quota
i got tired of using unix quotas. they have their place, but with qpopper,
i can't trust it. We took off quotas and put mailbox limits on our
incoming MTA. Postfix for us, maybe sendmail for you (dunno if sendmail
has a patch for this).
We give it a default num. of like 2500 blocks for everyone.
And then have a db map for specific users
user1 10000
user2 5000
etc..
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Wed, 20 Dec 2000, Theresa M Peter wrote:
> One thing that we have discovered is no matter how many times we email
> individuals to inform them that they are using 80% of their soft quota or
> are over quota, they don't fix it. In our email message we are very
> explicit on how to resolve this issue. I believe we are going to be moving
> to not allow those individuals who are over quota to send mail. One other
> thing we are contemplating is forcing Qpopper to dump all mail that is
> older than 3 months when people check their mail.
>
> One thing that I have noticed with UNIX quotas, is that they often get out
> of synch with how much disk space is actually being used by the user. What
> we have done is resynch the file systems quota table weekly at the same
> time we check individual's quota and mail them their warning message. We
> also have tweaked the error messages in Popper so that they are supposed to
> call our helpdesk when they are over quota, while this has helped slightly,
> I still have over 2000 users who are overquota.
>
>
> At 05:08 AM 12/21/00 +1300, Alan Brown wrote:
> >On Wed, 20 Dec 2000, Edwin Ringersma wrote:
> >
> > > After suggestion of someone on this list (thanks!)
> > > I've put soft limits to the limit we had on the mail.
> > > The hard limit is over twice that size.
> > > Looks fine. qpopper is able to put the mail back in the spooldir.
> > > I'm now waiting to see what happens if someone is over their grace
> > > period. (or maybe somebody on this list knows?)
> >
> >Once the grace period expires, the problems will resume. I advise
> >setting it to a short period and making sure that the quota daemon is
> >set up to mail people who go overquota.
> >
> >AB
>
>
Date: Wed, 20 Dec 2000 13:09:58 -0600
From: DWX Network Operations <tracy at dwx dot com>
Subject: Re: Serious problem....
I'll chime in here too - just to add what may or may not be obvious - When
you check your current binaries against the original ones, be sure to check
them using md5. If the binaries are trojaned, simply checking the file size
and creation date won't be enough as most rootkits out there will have
modified the trojaned versions such that they look identical to the
original binaries.
The only way to be sure is to compare the md5 checksum of both versions.
Again, forgive me if this is an exercise in the obvious!
Tracy
At 04:34 PM 12/20/00 +0000, peter.allen at moon-light.co dot uk wrote:
>If you *may* have been hacked at some stage in the past, are you now sure
>that you have non-trojaned version of those tests such as top, netstat etc.
>
>It may be worthwhile checking your current ones against the original
>binaries (or what you think you should have) just in case. For future
>reference TripWire is useful for this. You could also scan from the
>outside using nmap or similar to see what ports appear open.
>
>lsof is a worthwhile tool and may be obtained from
>http://www.stokely.com/unix.sysadm.resources/shareware.www.html
>
>HTH
>
>Peter
>
>
>At 09:53 20/12/2000 -0600, Ricky Crow wrote:
> >
> >
> >On Thu, 21 Dec 2000, Peter Evans wrote:
> >
> >> lots. But no actual information ^^;
> >>
> >>
> >> 1 - what OS are you running, have you locked down any of the
> >> non-essential crap that things like redhat/solaris
> >> and the likes come with?
> >
> >Running BSD/OS 2.01... Yes, I know it's old, but it has been extremely
> >stable over the last 4-5 years on the same machine.
> >Yes, the system has been locked down, as well.
> >
> >> 2 - when it craps out (for want of a better word) what else is the
> >> system doing? Commands that may help you here:
> >>
> >> top
> >
> >Nothing really serious or unusual, here... I am experiencing the problem
> >as of right now, and here's what top shows:
> >
> >
> >load averages: 0.46, 0.41, 0.36
> >09:43:37
> >90 processes: 2 running, 88 sleeping
> >Cpu states: 2.0% user, 0.0% nice, 3.0% system, 0.0% interrupt, 95.0%
> >idle
> >Memory: Real: 15M/32M Virt: 78M/254M Free: 72M
> >
> > PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
> >12362 root 2 0 5184K 5084K sleep 1:37 1.61% 1.61% named
> >23724 root 2 0 1148K 1040K sleep 0:00 6.00% 0.29% sendmail
> >23721 root 28 0 256K 444K run 0:00 1.40% 0.20% top
> >23325 nobody 2 0 1900K 972K sleep 0:00 0.10% 0.10% httpd
> >23656 nobody 2 0 1900K 944K sleep 0:00 0.05% 0.05% httpd
> >19761 root 2 0 1044K 260K sleep 0:05 0.05% 0.05% sendmail
> >23131 root 28 0 536K 388K run 0:00 0.00% 0.00% ftpd
> > 1991 root 18 0 1876K 1000K sleep 0:24 0.00% 0.00% httpd
> >15981 rickyc 18 0 592K 764K sleep 0:00 0.00% 0.00% tcsh
> >17909 root 18 0 584K 744K sleep 0:00 0.00% 0.00% tcsh
> >19574 root 18 0 540K 704K sleep 0:00 0.00% 0.00% tcsh
> >15159 rickyc 18 0 536K 660K sleep 0:00 0.00% 0.00% tcsh
> >13145 rickyc 18 0 536K 652K sleep 0:00 0.00% 0.00% tcsh
> > 126 root 18 -12 352K 416K sleep 0:00 0.00% 0.00% xntpd
> > 2099 root 18 0 340K 220K sleep 0:02 0.00% 0.00% cron
> >
> >
> >> iostat
> >
> >ns1: {44} % iostat
> > tty sd0 sd1 sd2 sd3
> >cpu
> > tin tout sps tps msps sps tps msps sps tps msps sps tps msps us ni sy
> >id
> > 0 38 87 3 4.9 0 0 5.0 0 0 0.0 351 24 3.8 8 0 21
> >0 71
> >
> >
> >I don't know EXACTLY what all of that means on iostat, but that's what it
> >shows right now, too.
> >
> >> netstat
> >
> >There is nothing unusual in there....and no connections on port 110 right
> >now, either.
> >
> >> ps -ef (-auxww or whatever)
> >
> >Nothing unusual.. There are probably too many processes listed to copy
> >and paste into this email, but there isn't anything that makes me
> >suspicious or looks unusual.
> >
> >> lsof
> >
> >I don't have that command on this machine for some reason......
> >
> >> These should give you hints about things like resource-starvation,
> >> strange crap and so on.
> >
> >Nothing strange... Can't figure this out... Any other ideas?
> >
> >> 3 - look in the system logs for clues.
> >>
> >> This is probably number 2a, not 3.
> >
> >Been looking in the logs....even doing a tail -f to watch the log as it's
> >happening, then I keep testing mail in another window and waiting for it
> >to "crap out" and nothing.... Nothing unusual. No inetd messages telling
> >me that it is shutting down that service or anything.... It's frustrating
> >me to no end.
> >
> >
> >> There, that should get you looking in the right direction.
> >> It could be something as simple as "not using server-mode/
> >> noupdateonabort/nostatus and having allowed your lusers to
> >> build up 900 mb mailboxes."
> >
> >We have a few people with mailboxes approaching 10 megs on the system, but
> >by and large, we don't have all that many that get that big.
> >
> >> Oh, and we have 30000 lusers on a linux box using qp3.1+ldap,
> >> without so much as a hiccup. so I suspect soemthing silly.
> >
> >Damn.... I wish I could say that.....
> >I've only got a couple of thousand on this box, and it's giving me fits.
> >
> >Ricky
> >