The qpopper list archive ending on 9 Jul 2001


Topics covered in this issue include:

  1. what's this .cache file and why it remains
       PM WONG <pmwong at power25t.hkbu.edu dot hk>
       Tue, 3 Jul 2001 04:38:11 +0800 (HKT)
  2. QPopper and SSL
       "koriun@ipia" <koriun at ipia dot sci dot am>
       Tue, 3 Jul 2001 12:33:50 +0400
  3. Authentication Problems
        <lists at britlinks.co dot uk>
       Tue, 3 Jul 2001 15:34:14 +0100 (BST)
  4. Qpopper 4.0.3 problem
       "Dat B. Tran" <dtran at dli dot com>
       Tue, 03 Jul 2001 12:37:53 -0400
  5. Re: APOP Problem
       Randall Gellens <randy at qualcomm dot com>
       Tue, 3 Jul 2001 12:33:15 -0700
  6. Blocking email sent to specific users
       "Leighton Fehr" <leighton.fehr at guest-tek dot com>
       Tue, 3 Jul 2001 15:57:44 -0600
  7. Re: Blocking email sent to specific users
       Gregory Hicks <ghicks at cadence dot com>
       Tue, 3 Jul 2001 15:05:54 -0700 (PDT)
  8. RE: Blocking email sent to specific users
       "Leighton Fehr" <leighton.fehr at guest-tek dot com>
       Tue, 3 Jul 2001 16:22:32 -0600
  9. Re: Blocking email sent to specific users
       peter.allen at moon-light.co dot uk
       Tue, 03 Jul 2001 23:47:48 +0100
 10. RE: Blocking email sent to specific users
       peter.allen at moon-light.co dot uk
       Wed, 04 Jul 2001 00:04:08 +0100
 11. Re: Blocking email sent to specific users
       Clifton Royston <cliftonr at lava dot net>
       Tue, 3 Jul 2001 13:23:25 -1000
 12. Re: Blocking email sent to specific users
       Admin Mailing Lists <mlist at intergrafix dot net>
       Tue, 3 Jul 2001 22:57:51 -0400 (EDT)
 13. server mode for user, but sometimes .user.pop still there
       PM WONG <pmwong at power25t.hkbu.edu dot hk>
       Wed, 4 Jul 2001 15:17:07 +0800 (HKT)
 14. mail all users
       rxmendoz <rudy at planetlink dot net>
       Wed, 04 Jul 2001 10:16:45 -0500
 15. Re: mail all users
       Jeff Donovan <jdonovan at beth.k12.pa dot us>
       Wed, 4 Jul 2001 11:44:22 -0400
 16. Re: mail all users
       Gregory Hicks <ghicks at cadence dot com>
       Wed, 4 Jul 2001 08:55:04 -0700 (PDT)
 17. Re: mail all users
       "Alex M" <alex at myzona dot net>
       Wed, 4 Jul 2001 13:12:06 -0700
 18. Re: How do I set up Bulletins
       Randall Gellens <randy at qualcomm dot com>
       Wed, 4 Jul 2001 17:02:10 -0700
 19. Re: I/O error flushing output to client ???
       Randall Gellens <randy at qualcomm dot com>
       Wed, 4 Jul 2001 17:14:03 -0700
 20. Re: Tools/methods for deleting old email?
       Randall Gellens <randy at qualcomm dot com>
       Wed, 4 Jul 2001 17:27:33 -0700
 21. Re: Qpopper 4.03
       Randall Gellens <randy at qualcomm dot com>
       Wed, 4 Jul 2001 17:32:36 -0700
 22. Re: runtime options in config file NOT user-specific?
       Randall Gellens <randy at qualcomm dot com>
       Wed, 4 Jul 2001 17:45:42 -0700
 23. Re: server mode for user, but sometimes .user.pop still there
       Clifton Royston <cliftonr at lava dot net>
       Thu, 5 Jul 2001 07:14:42 -1000
 24. Re: mail all users
       "Kenneth Porter" <shiva at well dot com>
       Fri, 06 Jul 2001 03:28:26 -0700
 25. bug ?? in QPopper 4.0.3 regarding X-UIDL header
       "Josh Hillman" <admin-maillist at talstar dot com>
       Fri, 6 Jul 2001 11:23:45 -0400
 26. Re: Questions about authentication.
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:06:02 -0700
 27. Re: define server mode for user without telling him
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:07:26 -0700
 28. Re: unix netscape messenger don't delete mail from server
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:10:42 -0700
 29. Re: what's this .cache file and why it remains
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:17:54 -0700
 30. Re: QPopper and SSL
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:12:07 -0700
 31. Re: Authentication Problems
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:20:18 -0700
 32. Re: mail all users
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:27:07 -0700
 33. Re: Qpopper 4.0.3 problem
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:22:12 -0700
 34. Re: what's this .cache file and why it remains
       Homer Wilson Smith <homer at lightlink dot com>
       Fri, 6 Jul 2001 14:55:35 -0400 (EDT)
 35. Re: setting server-mode for individual user,how?
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:14:36 -0700
 36. Re: Questions about authentication.
       Gustavo Viscaino <g_viscaino at yahoo dot com>
       Fri, 6 Jul 2001 12:31:14 -0700 (PDT)
 37. Re: bug ?? in QPopper 4.0.3 regarding X-UIDL header
       Randall Gellens <randy at qualcomm dot com>
       Fri, 6 Jul 2001 11:32:18 -0700
 38. Qpopper 4.0.3 and Kerberos 5 version 1.2.2
       "Dat B. Tran" <dtran at dli dot com>
       Fri, 06 Jul 2001 16:31:17 -0400
 39. Re: what's this .cache file and why it remains
       Clifton Royston <cliftonr at lava dot net>
       Fri, 6 Jul 2001 11:22:47 -1000
 40. Re: mail all users
       rxmendoz <rudy at planetlink dot net>
       Mon, 09 Jul 2001 01:33:33 -0500
 41. Encrypted Private Key
       "Matt Goyer" <mgoyer at fairtunes dot com>
       Mon, 9 Jul 2001 12:06:47 -0400
 42. i/o Broken pipe
       "bobw" <wrf7 at qwest dot net>
       Mon, 9 Jul 2001 08:44:16 -0600
 43. Re: mail all users
       Gregory Hicks <ghicks at cadence dot com>
       Mon, 9 Jul 2001 07:57:08 -0700 (PDT)
 44. Bulletin From line woes
       "Gene Bomgardner" <glbj at bellatlantic dot net>
       Mon, 9 Jul 2001 09:08:45 -0400
 45. Security Question with temp files...
       Jack Sasportas <jack at innovativeinternet dot com>
       Mon, 09 Jul 2001 13:13:51 -0400
 46. Re: Security Question with temp files...
       "Kenneth Porter" <shiva at well dot com>
       Mon, 09 Jul 2001 10:56:56 -0700
 47. Poprelayd & Scanaddr & Qpopper
       "Matt Goyer" <mgoyer at fairtunes dot com>
       Mon, 9 Jul 2001 13:19:36 -0400
 48. Re: Security Question with temp files...
       Clifton Royston <cliftonr at lava dot net>
       Mon, 9 Jul 2001 08:41:51 -1000
 49. Re: Security Question with temp files...
       Jack Sasportas <jack at innovativeinternet dot com>
       Mon, 09 Jul 2001 13:44:34 -0400
 50. Re: Security Question with temp files...
       Clifton Royston <cliftonr at lava dot net>
       Mon, 9 Jul 2001 09:31:09 -1000

Date: Tue, 3 Jul 2001 04:38:11 +0800 (HKT)
From: PM WONG <pmwong at power25t.hkbu.edu dot hk>
Subject: what's this .cache file and why it remains

Just got 4.0.3 running.
I tried server-mode for specific user. (i used the method of
creating a .user.qpopper-mode file under /var/spool/mail)
But i discovered that there's a file called
.username.qpopper.cache being created under /var/spool/mail
and it remains there forever.
What's this for and could i delete it ?

Thanks
Pui


Date: Tue, 3 Jul 2001 12:33:50 +0400
From: "koriun@ipia" <koriun at ipia dot sci dot am>
Subject: QPopper and SSL

Hi all.

Can I configure SSL for qpopper without CA. ??



Date: Tue, 3 Jul 2001 15:34:14 +0100 (BST)
From:  <lists at britlinks.co dot uk>
Subject: Authentication Problems

Hi,

I'm new here having got rather stuck last night upgrading a cobalt raq2
running a rather old version of qpopper as it's pop3 daemon. I installed
a number of patches from the cobalt website only to discover that once
that was done users could no longer log in to collect their e-mail. Searching
through the (unfortunately rather minimal) log files I found a number of
errors, the  first of which was:

Jul  3 00:27:29 mail in.qpopper[19367]: Unable to obtain socket and address
of client, err = 134

I haven't seen this error repeated but now see regular reports such as:

Jul 11 11:51:33 mail /usr/sbin/in.qpopper[1065]: Unable to obtain socket
and address of client: Socket operation on non-socket (95)

(I realise that the date is wrong and intend to fix this shortly).

When I try and telnet to the server on port 110 I am able to connect and
get the expected welcome message:

"Escape character is '^]'.
+OK QPOP (version ?) at localhost starting.
user USERNAME
+OK Password required for USERNAME.
pass PASSWORD
Connection closed by foreign host."

I know that the username and password I have entered are correct as I've
been using them to ssh to the box.

Does anyone have any idea where the problem may lie or suggestions of
things to check?

cheers. James.

-- 
    James Stewart     |          Britlinks         |  The Phantom Tollbooth
james at britlinks.co.uk | http://www.britlinks.co.uk | http://www.tollbooth dot org

        Free CDs, MP3s and RealAudio - http://britlinks.co.uk/album/


Date: Tue, 03 Jul 2001 12:37:53 -0400
From: "Dat B. Tran" <dtran at dli dot com>
Subject: Qpopper 4.0.3 problem

Hi,
	I've Qpopper 4.0.3 compiled with OpenSSL 0.9.6a.  When i used Eudora 5 to 
connect to the SSL support pop3 server, it works fine.  When i used Outlook 
or Outlook Express to connect to the SSL support pop3 server, i get the 
following message.

Jul  3 12:22:52 <servername> qpopper[4925]: (null) at <client's hostname> 
(client's IP): -ERR POP EOF or I/O Error
Jul  3 12:22:52 <servername> qpopper[4925]: I/O error flushing output to 
client  at <client's hostname> [client's IP]: Operation not permitted


	Does anyone know why this happen?  I don't know why Eudora's is working 
fine, but not Outlook or Outlook Express.  All comments are appreciated.

--DBT


Date: Tue, 3 Jul 2001 12:33:15 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: APOP Problem

At 11:58 AM +0800 6/27/01, Desmond Lim wrote:

>  I'm using qpopper 4 on RH6.1. I'm also using APOP authentication. It seems
>  that something is wrong even if I follow the installation guide closely.
>  I get this error in my maillog
>  "-ERR [AUTH] You must use stronger authentication such as AUTH SCRAM-MD5 or
>  APOP to connect to this server".
>
>  Does anyone know how to resolve this?

Easy.  Use APOP.  The error indicates that you're set up for APOP 
in Qpopper, but the client isn't using APOP.

From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
Subject: Blocking email sent to specific users
Date: Tue, 3 Jul 2001 15:57:44 -0600

Hi.
I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
I am looking for a way to block email sent to one of my users and haven't
been able to figure it out yet.  I want to block everybody, except the users
on my mail server, from being able to send messages to a particular account.
But I don't want to block access to the other accounts on my mail server.
Is this possible with QPopper?  If so, how would I find out more info on how
to do it?

Thanks for your help,
Leighton


Date: Tue, 3 Jul 2001 15:05:54 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Blocking email sent to specific users

alias the user(s) you want blocked to /dev/null.

that way, the user will not receive email...

Regards,
Gregory Hicks

> From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
> Date: Tue, 3 Jul 2001 15:57:44 -0600
> 
> Hi.
> I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> I am looking for a way to block email sent to one of my users and 
haven't
> been able to figure it out yet.  I want to block everybody, except the 
users
> on my mail server, from being able to send messages to a particular 
account.
> But I don't want to block access to the other accounts on my mail 
server.
> Is this possible with QPopper?  If so, how would I find out more info 
on how
> to do it?


From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
Subject: RE: Blocking email sent to specific users
Date: Tue, 3 Jul 2001 16:22:32 -0600

Thanks Gregory,

I want that user to be able to receive mail, but not from anyone but the
users that are on my mail server. Will your suggestion allow this?

Leighton

> >-----Original Message-----
> >From: Gregory Hicks [mailto:ghicks at cadence dot com]
> >Sent: Tuesday, July 03, 2001 4:06 PM
> >To: qpopper at lists.pensive.org; leighton dot fehr at guest-tek dot com
> >Subject: Re: Blocking email sent to specific users
> >
> >
> >alias the user(s) you want blocked to /dev/null.
> >
> >that way, the user will not receive email...
> >
> >Regards,
> >Gregory Hicks
> >
> >> From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
> >> Date: Tue, 3 Jul 2001 15:57:44 -0600
> >>
> >> Hi.
> >> I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> >> I am looking for a way to block email sent to one of my users and
> >haven't
> >> been able to figure it out yet.  I want to block
> >everybody, except the
> >users
> >> on my mail server, from being able to send messages to a
> >particular
> >account.
> >> But I don't want to block access to the other accounts on my mail
> >server.
> >> Is this possible with QPopper?  If so, how would I find
> >out more info
> >on how
> >> to do it?
> >


Date: Tue, 03 Jul 2001 23:47:48 +0100
From: peter.allen at moon-light.co dot uk
Subject: Re: Blocking email sent to specific users

At 15:05 03/07/01 -0700, Gregory Hicks wrote:
>alias the user(s) you want blocked to /dev/null.
>
>that way, the user will not receive email...

Although conversely this will not allow users of your mail server to send 
to that account either.

IMHO, and unless someone wiser than I knows to the contrary, this is 
basically a question for whatever sends your mail e.g. sendmail, qmail etc 
rather than qpopper which deals more with checking of mail.

As a thought, qmail allows you to call an external program via that user's 
.qmail file.  You would then need a simple script to check whether the 
e-mail came from one of your users.  (A little care would be required to 
determine how you check that it is one of your users though.)

Rather than re-invent the wheel, perhaps you could use one of the anti-spam 
pieces of software to achieve what you want instead of starting from scratch.

Alternatively, and a little radically, if you already had a spare Linux box 
around and available for the purpose, you could move the mailbox in 
question to that machine and tie it down to only receive from your main 
mail server.

HTH and pls do let the list know if you get a good solution.

Peter



> > From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
> > Date: Tue, 3 Jul 2001 15:57:44 -0600
> >
> > Hi.
> > I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> > I am looking for a way to block email sent to one of my users and
>haven't
> > been able to figure it out yet.  I want to block everybody, except the
>users
> > on my mail server, from being able to send messages to a particular
>account.
> > But I don't want to block access to the other accounts on my mail
>server.
> > Is this possible with QPopper?  If so, how would I find out more info
>on how
> > to do it?



Date: Wed, 04 Jul 2001 00:04:08 +0100
From: peter.allen at moon-light.co dot uk
Subject: RE: Blocking email sent to specific users


I do not know the intricacies of your particular situation, but here is an 
easy, quick-n-dirty solution:

/dev/null the existing mailbox, set up a new mailbox but only tell your 
users of its aliases !!  Obviously that user will have to be told to check 
for mail from the new mailbox and this method is not fool-proof but, 
depending on your needs, may prove adequate for the short term.

Peter


At 16:22 03/07/01 -0600, Leighton Fehr wrote:
>Thanks Gregory,
>
>I want that user to be able to receive mail, but not from anyone but the
>users that are on my mail server. Will your suggestion allow this?
>
>Leighton
>
> > >-----Original Message-----
> > >From: Gregory Hicks [mailto:ghicks at cadence dot com]
> > >Sent: Tuesday, July 03, 2001 4:06 PM
> > >To: qpopper at lists.pensive.org; leighton dot fehr at guest-tek dot com
> > >Subject: Re: Blocking email sent to specific users
> > >
> > >
> > >alias the user(s) you want blocked to /dev/null.
> > >
> > >that way, the user will not receive email...
> > >
> > >Regards,
> > >Gregory Hicks
> > >
> > >> From: "Leighton Fehr" <leighton.fehr at guest-tek dot com>
> > >> Date: Tue, 3 Jul 2001 15:57:44 -0600
> > >>
> > >> Hi.
> > >> I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> > >> I am looking for a way to block email sent to one of my users and
> > >haven't
> > >> been able to figure it out yet.  I want to block
> > >everybody, except the
> > >users
> > >> on my mail server, from being able to send messages to a
> > >particular
> > >account.
> > >> But I don't want to block access to the other accounts on my mail
> > >server.
> > >> Is this possible with QPopper?  If so, how would I find
> > >out more info
> > >on how
> > >> to do it?
> > >



Date: Tue, 3 Jul 2001 13:23:25 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Blocking email sent to specific users

On Tue, Jul 03, 2001 at 03:57:44PM -0600, Leighton Fehr wrote:
> I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> I am looking for a way to block email sent to one of my users and haven't
> been able to figure it out yet.  I want to block everybody, except the users
> on my mail server, from being able to send messages to a particular account.
> But I don't want to block access to the other accounts on my mail server.
> Is this possible with QPopper?  If so, how would I find out more info on how
> to do it?

1) Popper is the wrong tool for this.

2) This *can* be very easily done with procmail, possibly depending on
how literally you meant the term "block." If you have procmail
installed on your server, you could give this user a .procmailrc file
which uses a pattern-match rule to throw away (delete) any incoming
mail not originating from your server, before it's delivered.  If you
want it to actually block email in the sense of refusing email delivery
from outside your server, that's more complicated, and whether it's
even possible depends on what you're using for your mail transport
(sendmail, etc.).

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Tue, 3 Jul 2001 22:57:51 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Blocking email sent to specific users

yes, definately an MTA question..but..
if you have an external MX and an internal MX jsut block email for said
user at the external MX, which would fix this.
if not, then like other's said, a procmailrc, or piping to a script via
/etc/aliases. Off the top of my head, in the script you could check the
username part of the From: address for existance in your passwd file to
see if the sender is one of yours (assuming you use the passwd file)
although From addresses can be forged, you play the percentages i suppose.
Or you could try looking at the last Received: line to find an ip matching
one of your dialup IP subnets? *shrug*
It might be more work than it's worth. I don't know why you would want to
block everybody on the outside (of course that's up to you) but if it's
some sort of spam/abuse issue, better to go to the source I say.

-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco                       Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org       Intergrafix Internet Services

    "Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org                http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.

On Tue, 3 Jul 2001, Leighton Fehr wrote:

> Hi.
> I have QPopper 3.1.2 installed on my Linux RedHat 6.2 server.
> I am looking for a way to block email sent to one of my users and haven't
> been able to figure it out yet.  I want to block everybody, except the users
> on my mail server, from being able to send messages to a particular account.
> But I don't want to block access to the other accounts on my mail server.
> Is this possible with QPopper?  If so, how would I find out more info on how
> to do it?
> 
> Thanks for your help,
> Leighton
> 
> 


Date: Wed, 4 Jul 2001 15:17:07 +0800 (HKT)
From: PM WONG <pmwong at power25t.hkbu.edu dot hk>
Subject: server mode for user, but sometimes .user.pop still there

I have used the new feature of ver 4.0.3 which allows setting
server mode for individual users.
Mostly, it's okay as i monitored the files and 
.user.pop always remains 0 size (i.e. much faster now as it won't
have to copy from /var/spool/mail/user)
But strange thing is that at times, i could still see
.user.pop starts to grow (i.e. copied as if no server mode was set)
Under what circumstances does it behave like this ?




Date: Wed, 04 Jul 2001 10:16:45 -0500
From: rxmendoz <rudy at planetlink dot net>
Subject: mail all users

Is there a default address that will send mail out to all users on the
system ?
It is to do a company wide mail out.



thanks
Rudy


Date: Wed, 4 Jul 2001 11:44:22 -0400
From: Jeff Donovan <jdonovan at beth.k12.pa dot us>
Subject: Re: mail all users

hi,

you can either create an alias of all your users or use bulletins.

to learn more about bulletins, see man qpopper and the Archives.
it will create a file that everyone receives when they check their mail.

--jeff


>Is there a default address that will send mail out to all users on the
>system ?
>It is to do a company wide mail out.
>
>
>
>thanks
>Rudy

-- 
------------------------------------------------------------------------
Jeff Donovan                    Network Analyst
Bethlehem Area School District	Network Operations
Bethlehem, PA  18020            (610) 807-5571  jdonovan at beth.k12.pa dot us

Date: Wed, 4 Jul 2001 08:55:04 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: mail all users

> Date: Wed, 04 Jul 2001 10:16:45 -0500
> From: rxmendoz <rudy at planetlink dot net>
> 
> Is there a default address that will send mail out to all users on the
> system ?
> It is to do a company wide mail out.

In a wordL  No.

Reaching all users at a particular site or company depends on the alias 
that is created at each site or company for that purpose.

Qpopper allows the use of 'bulletins' that are automagically sent to 
each user when they check email...

Regards,
Gregory Hicks

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com


From: "Alex M" <alex at myzona dot net>
Subject: Re: mail all users
Date: Wed, 4 Jul 2001 13:12:06 -0700

Its done with an MTA, if you are running sendmail or any other sendmail-ish
MTA, read this chapter on how-to email all users:

http://www.sendmail.org/faq/section4.html#4.21

-=-=-=-
Regards,

Alex M aka TZapper
alex at myzona dot net

----- Original Message -----
From: "rxmendoz" <rudy at planetlink dot net>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Wednesday, July 04, 2001 8:16 AM
Subject: mail all users


> Is there a default address that will send mail out to all users on the
> system ?
> It is to do a company wide mail out.
>
>
>
> thanks
> Rudy
>
>


Date: Wed, 4 Jul 2001 17:02:10 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: How do I set up Bulletins

At 10:26 AM -0400 6/27/01, Jeff Donovan wrote:

>  :)
>  I sent this message off before I got finished with the man page.

Note that the Administrator's Guide is much more detailed than the man page.

>
>  one question
>
>  how can i create a Document/ bulletin in "Mailbox Format", without 
> going through sending a copy to myself then saving it back?

Easiest way is to copy the headers from an existing bulletin (or the 
sample in the Admin Guide).

>
>  --jeff
>
>>
>>
>>  Have you read the Qpopper manual?  It's pretty well detailed in there.
>>
>>  FP
>
>  --
>  ------------------------------------------------------------------------
>  Jeff Donovan                    Network Analyst
>  Bethlehem Area School District	Network Operations
>  Bethlehem, PA  18020            (610) 807-5571  jdonovan at beth.k12.pa dot us


Date: Wed, 4 Jul 2001 17:14:03 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: I/O error flushing output to client ???

At 10:51 PM -0400 6/27/01, Jack Sasportas wrote:

>  OK I have looked at past posts, and looked on the web with no answer to
>  this problem.
>  I noticed the few times I get this, there are literaly hundreds of
>  entries in the logfile.
>
>  Can someone from Qualcomm please help out and really define the
>  importance of this message?

Usually it can be ignored, but if you're seeing a ton of them, I'd 
suspect some network problem.  What else do the logs say?


Date: Wed, 4 Jul 2001 17:27:33 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Tools/methods for deleting old email?

At 7:49 AM -0700 6/28/01, Gregory Hicks wrote:

>  Of course, with Eudora, there are other problems.  For instance, if the
>  user sets the option "Do not download any email more than xKB", once
>  the user downloads the first xKB of the email, Eudora (or Popper, I'm
>  not sure which is at fault here) thinks the mail has been read.  What
>  the user really wanted to do was to defer downloading until they get to
>  a faster connection.  What happens is that Eudora *never* downloads the
>  message again.
>
>  The only fix I have found is to log in to the mail server and use some
>  command line client ('pine' seems to work best), resend the message to
>  the user and delete the original message.
>
>  Another effect of this problem is that the "not downloaded" messages
>  cannot be deleted by the user.  As far as the GUI is concerned, the
>  message is moved to the trash, but when the trash is "emptied", the
>  message is not deleted.  It also never shows up in the "Inbox" pane
>  again...

I don't know what version of Eudora or on which platform you're 
talking about, but this is not the way current versions on any 
platform have worked for the last few years.

When a message is partly downloaded because of the size restriction, 
the part that was downloaded is in the mailbox, with a 
specially-marked entry in the window.  Users can see at a glance that 
it was partially downloaded.  Reading it, one sees a message that 
says that the rest of the message is on the server, how big it is, 
and an icon to click to get the rest.  The user can always choose 
"delete from server".

In addition, Eudora has a feature called "check mail specially" (hold 
down shift on Windows or option on Macs while checking mail) that 
offers a bunch of options.  Among them are "delete everything on 
server" and "fetch all message headers to inbox".  The latter gets 
the stubs for all messages, and the user can choose which to fully 
download or delete from the server.

Date: Wed, 4 Jul 2001 17:32:36 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Qpopper 4.03

At 5:34 PM +0400 6/28/01, Alexander Utkin wrote:

>  From qpopper manual
>  i found out that i have to use crypt library to compile uner FreeBSD. As far
>  as i could understand (although i am not sure) i should compile
>  with --enable-specialauth. On that process Qpopper.4.0.2 and 4.0.3 on
>  FreeBSD 2.1 and 3.4 give me while making:

Usually, with 4.0.3 you don't have to set '--enable-specialauth' 
because the configure script generally is able to figure out if you 
need it or not.  I thought the Administrator's Guide said that.

So, try a 'make realclean', then re-run ./configure and make.

Date: Wed, 4 Jul 2001 17:45:42 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: runtime options in config file NOT user-specific?

At 12:34 PM +0800 6/29/01, PM WONG wrote:

>  Just downloaded the user adm. manual for ver 4.
>  Uunder the chapter "Run-Time Options from a Config file"
>  (page 27 to be exact), it said :
>  "Some options have restrictions indicating that they can't be
>  used in a .qpopper-options file in a user's home directory ..."
>
>  But when i looked at the table that follows, it doesn't
>  say which are those that can and those that can't
>
>  Any comments

The table of configure file options indicates, for each option, what 
restrictions there are.  Some options have no restrictions, some 
can't be user-specific, and some can't be in a file in the user's 
home directory.

Date: Thu, 5 Jul 2001 07:14:42 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: server mode for user, but sometimes .user.pop still there

On Wed, Jul 04, 2001 at 03:17:07PM +0800, PM WONG wrote:
> I have used the new feature of ver 4.0.3 which allows setting
> server mode for individual users.
> Mostly, it's okay as i monitored the files and 
> .user.pop always remains 0 size (i.e. much faster now as it won't
> have to copy from /var/spool/mail/user)
> But strange thing is that at times, i could still see
> .user.pop starts to grow (i.e. copied as if no server mode was set)
> Under what circumstances does it behave like this ?

There are certain circumstances where even in server mode it "must"
recopy the spool file (must in the sense of the easiest way to avoid
some hideously complicated and error-prone update-in-place algorithm.)

The main cases I know of are: 

1) POP client deletes some mail selectively, but not all mail;
2) POP client deletes all mail, but new mail is delivered to the spool
during the POP session, and must be preserved.

Clearly neither of these can be handled either by leaving the spool
file alone or by truncating it, which are the server mode's special
optimizations.  The nice thing is that those two simple optimizations
probably account for 90% or more of all POP sessions.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

From: "Kenneth Porter" <shiva at well dot com>
Date: Fri, 06 Jul 2001 03:28:26 -0700
Subject: Re: mail all users

On Wed, 4 Jul 2001 13:12:06 -0700, Alex M wrote:

>Its done with an MTA, if you are running sendmail or any other sendmail-ish
>MTA, read this chapter on how-to email all users:
>
>http://www.sendmail.org/faq/section4.html#4.21

I keep all my legitimate users in /etc/mail/virtusertable, so I just
build my aliases from that, grepping out a few special names like
"postmaster". I added the command to the Makefile in /etc/mail, so the
alias file gets rebuilt along with virtusertable.db just by typing
"make".

However, it would be nice to have a tool that could receive mail from
sendmail and that would reformat it and deposit it in the bulletins
directory with the next bulletin number. Sendmail has the ability to
run a program for a given alias, so the tool could be hooked to that.
For example, in /etc/aliases, one could have:

bulletin: |/usr/local/sbin/make-bulletin

For security, one could gpg-sign one's post and make-bulletin could
check the signature before processing it. (It could deliver posts with
failed sigs to the abuse alias.)

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



From: "Josh Hillman" <admin-maillist at talstar dot com>
Subject: bug ?? in QPopper 4.0.3 regarding X-UIDL header
Date: Fri, 6 Jul 2001 11:23:45 -0400

I'm new to this list and there doesn't appear to be any searching option for
the list archives, so please excuse me if this issue has been mentioned
before...

When issuing a
  ./configure --disable-status
during installation of QPopper 4.0.3, the resulting binary is different from
using a plain "./configure" however the X-UIDL header still shows up in
messages that have been popped.  It doesn't make any difference whether the
mail client leaves the messages on the server or pulls them.  Any message
handled by QPopper have the X-UIDL header followed by "garbage" text
(assuming the garbage part is normal).
The "--disable-status" and X-UIDL info is referenced on page 41 and 58 of
the Qpopper Administrator's Guide--Qpopper Version 4.0.

We need to prevent that header from showing up in messages because
Software.com's WebEdge 2.6.9a (webmail) has problems with messages that
contain it.  The webmail cannot delete those messages, nor can it correctly
reply to those messages.

System:  Solaris 8 on sparc

Installation steps that I used:

ftp://ftp.qualcomm.com/eudora/servers/unix/popper

cd /local/src
gunzip qpopper4.0.3.tar.gz
tar -xvf qpopper4.0.3.tar
cd qpopper4.0.3

ORIGINAL installation on 7/4/01:
  ./configure
  make
  make install


NEW installation on 7/6/01:
Backed up original install stuff:
  cd /local/src
  mv qpopper4.0.3 qpopper4.0.3.orig
  mv /usr/local/sbin/popper /usr/local/sbin/popper.4.0.3.orig
Start new installation:
  tar xvf qpopper4.0.3.tar
  cd qpopper4.0.3
  ./configure --disable-status
  make
  make install

Are the binaries different?  Yes:

/usr/local/sbin/
-rwxr-xr-x 1 130832 Jul  6 10:39 /usr/local/sbin/popper
-rwxr-xr-x 1 132648 Jul  4 19:55 /usr/local/sbin/popper.4.0.3.orig

Example of the header that won't go away:
  X-UIDL: <Ec"!-/S!!6Ch"!kGU!!

Thanks for any help/info...

Josh


Date: Fri, 6 Jul 2001 11:06:02 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Questions about authentication.

At 5:24 AM -0700 6/29/01, Gustavo Viscaino wrote:

>  You're right. But I think that an easier way would be
>  to use the --enable-specialauth, flag. Btw, Mark, this
>  is in the FAQ:
>
>  http://www.eudora.com/qpopper/faq.html#shadow

The fAQ needs to be updated.  In most cases you don't need to 
manually set '--enable-specialauth' because the configure script is 
often able to figure it out.  On some platforms it hurts to set it.

Date: Fri, 6 Jul 2001 11:07:26 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: define server mode for user without telling him

At 4:14 PM +0800 6/30/01, PM WONG wrote:

>  Now this new version 4 has this flexible option of having
>  the server mode for a specific user. This is handy as the
>  "global" server mode has too large impact on users.
>  Now i could trace some user's whose mailbox is tremendously
>  large (most probably he never deletes his mail or he has
>  somehow configure his mail client to "always leave on server")
>  Now suppose for performance sake, i make this user to have
>  "server mode" but don't inform him. If his mail client is
>  configured as "always leave on server", then  fine.
>  But if it's config is "leave on server" AND "delete mail from server
>  when local copy is deleted", what will the behaviour be for this
>  qpopper 4.0.3 ? Does it depend also on whether his client is
>  netscape or eudora or outlook .. etc

As far as server mode is concerned it doesn't matter.  Server mode 
only changes how and when Qpopper makes copies of the spool.

Date: Fri, 6 Jul 2001 11:10:42 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: unix netscape messenger don't delete mail from server

At 1:41 AM +0800 7/2/01, PM WONG wrote:

>   >
>>  That setting actually only takes effect when the 'trash' is emptied.
>>
>>  Until the trash is emptied, the mail still exists.
>  But i did empty the trash. Is it a bug of qpopper or that of
>  my netscape

It's unlikely to be a Qpopper bug, but if you want to be sure, 
reproduce the situation with debug tracing and see what Netscape 
tells Qpopper to do, and see if Qpopper does it.

To enable tracing in Qpopper:

1.  Do a 'make clean'
2.  Re-run ./configure, adding '--enable-debugging'.
3.  Edit the inetd.conf line for Qpopper, adding '-d' or '-t tracefile'.
4.  Send inetd a HUP signal.

This causes detailed tracing to be written to the syslog (if you used 
'-d') or to the file specified as 'tracefile'.

Date: Fri, 6 Jul 2001 11:17:54 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: what's this .cache file and why it remains

At 4:38 AM +0800 7/3/01, PM WONG wrote:

>  Just got 4.0.3 running.
>  I tried server-mode for specific user. (i used the method of
>  creating a .user.qpopper-mode file under /var/spool/mail)
>  But i discovered that there's a file called
>  .username.qpopper.cache being created under /var/spool/mail
>  and it remains there forever.
>  What's this for and could i delete it ?
>
>  Thanks
>  Pui

The cache file dramatically speeds up sessions if no new mail has 
arrived since the previous session.  You can remove the file or 
disable its creation, but you're generally better off leaving it 
alone.  You may want to enable server mode for all non-shell users to 
get the performance benefits.

Date: Fri, 6 Jul 2001 11:12:07 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: QPopper and SSL

At 12:33 PM +0400 7/3/01, koriun@ipia wrote:

>  Hi all.
>
>  Can I configure SSL for qpopper without CA. ??

See <http://www.eudora.com/qpopper/faq.html#ca> for how to use a test 
CA that you set up.

Date: Fri, 6 Jul 2001 11:20:18 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Authentication Problems

At 3:34 PM +0100 7/3/01, <lists at britlinks.co dot uk> wrote:

>  Hi,
>
>  I'm new here having got rather stuck last night upgrading a cobalt raq2
>  running a rather old version of qpopper as it's pop3 daemon. I installed
>  a number of patches from the cobalt website only to discover that once
>  that was done users could no longer log in to collect their e-mail. 
> Searching
>  through the (unfortunately rather minimal) log files I found a number of
>  errors, the  first of which was:
>
>  Jul  3 00:27:29 mail in.qpopper[19367]: Unable to obtain socket and address
>  of client, err = 134

This generally means you're running Qpopper in an incorrect way, such 
as trying to run an inetd version by itself.  If this is the case, 
either run it through inetd, or compile it for standalone mode.  See 
the Administrator's Guide for details.

>
>  I haven't seen this error repeated but now see regular reports such as:
>
>  Jul 11 11:51:33 mail /usr/sbin/in.qpopper[1065]: Unable to obtain socket
>  and address of client: Socket operation on non-socket (95)
>
>  (I realise that the date is wrong and intend to fix this shortly).
>
>  When I try and telnet to the server on port 110 I am able to connect and
>  get the expected welcome message:
>
>  "Escape character is '^]'.
>  +OK QPOP (version ?) at localhost starting.
>  user USERNAME
>  +OK Password required for USERNAME.
>  pass PASSWORD
>  Connection closed by foreign host."

This appears to be an older version of Qpopper compiled in SHY mode. 
Try upgrading to 4.0.3 (with or without SHY).

>
>  I know that the username and password I have entered are correct as I've
>  been using them to ssh to the box.
>
>  Does anyone have any idea where the problem may lie or suggestions of
>  things to check?
>
>  cheers. James.
>
>  --
>      James Stewart     |          Britlinks         |  The Phantom Tollbooth
>  james at britlinks.co.uk | http://www.britlinks.co dot uk | 
> http://www.tollbooth.org
>
>          Free CDs, MP3s and RealAudio - http://britlinks.co.uk/album/


Date: Fri, 6 Jul 2001 11:27:07 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: mail all users

At 11:44 AM -0400 7/4/01, Jeff Donovan wrote:

>  to learn more about bulletins, see man qpopper

I recommend the Qpopper Adminisstrator's Guide rather than the man 
pages.  The Guide is much more detailed.

Date: Fri, 6 Jul 2001 11:22:12 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Qpopper 4.0.3 problem

At 12:37 PM -0400 7/3/01, Dat B. Tran wrote:

>  Hi,
>  	I've Qpopper 4.0.3 compiled with OpenSSL 0.9.6a.  When i used 
> Eudora 5 to connect to the SSL support pop3 server, it works fine. 
> When i used Outlook or Outlook Express to connect to the SSL 
> support pop3 server, i get the following message.
>
>  Jul  3 12:22:52 <servername> qpopper[4925]: (null) at <client's 
> hostname> (client's IP): -ERR POP EOF or I/O Error
>  Jul  3 12:22:52 <servername> qpopper[4925]: I/O error flushing 
> output to client  at <client's hostname> [client's IP]: Operation 
> not permitted
>
>
>  	Does anyone know why this happen?  I don't know why Eudora's 
> is working fine, but not Outlook or Outlook Express.  All comments 
> are appreciated.
>
>  --DBT

My guess is that you've configured Qpopper for STLS, which your 
versions of Outlook and OE can't handle.  You can have your users use 
Eudora or versions of O/OE that support STLS, or enable both STLS and 
alternate-port SSL/TLS.  See the Administrator's Guide for details.

Date: Fri, 6 Jul 2001 14:55:35 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: what's this .cache file and why it remains

    I notice that the .cache files and temp drop files
are by default put in /var/spool/mail.  Historically we
have this extra stuff in /var/spool/popdrop on a different
spindle.  But then we can't use the mv command to rename
the tmp file to the main mailbox, right?

    Homer

------------------------------------------------------------------------
Homer Wilson Smith   Clean Air, Clear Water,  Art Matrix - Lightlink
(607) 277-0959       A Green Earth and Peace. Internet Access, Ithaca NY
homer at lightlink.com  Is that too much to ask? http://www.lightlink dot com

On Fri, 6 Jul 2001, Randall Gellens wrote:

> At 4:38 AM +0800 7/3/01, PM WONG wrote:
>
> >  Just got 4.0.3 running.
> >  I tried server-mode for specific user. (i used the method of
> >  creating a .user.qpopper-mode file under /var/spool/mail)
> >  But i discovered that there's a file called
> >  .username.qpopper.cache being created under /var/spool/mail
> >  and it remains there forever.
> >  What's this for and could i delete it ?
> >
> >  Thanks
> >  Pui
>
> The cache file dramatically speeds up sessions if no new mail has
> arrived since the previous session.  You can remove the file or
> disable its creation, but you're generally better off leaving it
> alone.  You may want to enable server mode for all non-shell users to
> get the performance benefits.
>


Date: Fri, 6 Jul 2001 11:14:36 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: setting server-mode for individual user,how?

At 3:16 PM +0800 7/2/01, PM WONG wrote:

>  4. But now i'm confused , do i put
>  set server-mode
>  OR
>  server-mode
>  in this file ?

All configuration files have the same syntax.  In this example it is 
'set server-mode' (or 'set server-mode = true' if you prefer).

>
>  BTW, the main aim of having server-mode is to avoid the
>  step of creating the .user.pop file, isn't it?
>  BUt it seems that whether this is created depends ALSO
>  on the client side. If that user still set "delete mail from
>  server when local copy is deleted" , that .user.pop file
>  creation still happens.
>  Is this true ?

The file is always created, but server mode determines if and when 
the spool is copied to it.



Date: Fri, 6 Jul 2001 12:31:14 -0700 (PDT)
From: Gustavo Viscaino <g_viscaino at yahoo dot com>
Subject: Re: Questions about authentication.

He said he was using 3.1.2. That's why I mentioned the
--enable-specialauth option. Unless he meant he was
already using 3.1.2 and having trouble upgrading to
4.0.3, but that wasn't very clear... at least to me
;-)

Gustavo Viscaino

--- Randall Gellens <randy at qualcomm dot com> wrote:
> At 5:24 AM -0700 6/29/01, Gustavo Viscaino wrote:
> 
> >  You're right. But I think that an easier way
> would be
> >  to use the --enable-specialauth, flag. Btw, Mark,
> this
> >  is in the FAQ:
> >
> >  http://www.eudora.com/qpopper/faq.html#shadow
> 
> The fAQ needs to be updated.  In most cases you
> don't need to 
> manually set '--enable-specialauth' because the
> configure script is 
> often able to figure it out.  On some platforms it
> hurts to set it.


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

Date: Fri, 6 Jul 2001 11:32:18 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: bug ?? in QPopper 4.0.3 regarding X-UIDL header

At 11:23 AM -0400 7/6/01, Josh Hillman wrote:

>  When issuing a
>    ./configure --disable-status
>  during installation of QPopper 4.0.3, the resulting binary is different from
>  using a plain "./configure" however the X-UIDL header still shows up in
>  messages that have been popped.  It doesn't make any difference whether the
>  mail client leaves the messages on the server or pulls them.  Any message
>  handled by QPopper have the X-UIDL header followed by "garbage" text
>  (assuming the garbage part is normal).
>  The "--disable-status" and X-UIDL info is referenced on page 41 and 58 of
>  the Qpopper Administrator's Guide--Qpopper Version 4.0.
>
>  We need to prevent that header from showing up in messages because
>  Software.com's WebEdge 2.6.9a (webmail) has problems with messages that
>  contain it.  The webmail cannot delete those messages, nor can it correctly
>  reply to those messages.

The no-status option (which can also be set at run-time) prevents 
Qpopper from storing the header in the spool.  Qpopper still 
generates the information and includes it in the message sent to the 
client because many clients depend on it.  It seems pretty broken to 
me for a client to behave poorly when seeing a header such as this, 
instead of just ignoring it.  What if someone happens to include such 
a header in an email?  Qpopper ignores it and uses it's own values, 
but if the POP server didn't filter it out it would break your 
webmail.  That seems bad.

You can manually patch Qpopper to not send the header, but you are 
probably better off getting the webmail software fixed to ignore the 
header.

Date: Fri, 06 Jul 2001 16:31:17 -0400
From: "Dat B. Tran" <dtran at dli dot com>
Subject: Qpopper 4.0.3 and Kerberos 5 version 1.2.2

Hi,
	I've troubles compiling Kerberos 5 version 1.2.2 with Qpopper 4.0.3 
(--with-kerberos5 option) Does anyone have any idea why?  Here's the errors 
that i got.  Thanks!

compat_recv.o(.text+0x700): undefined reference to `krb_net_read'
compat_recv.o(.text+0x734): undefined reference to `krb_net_read'
compat_recv.o(.text+0x7b4): undefined reference to `krb_net_read'
compat_recv.o(.text+0x7f2): undefined reference to `krb_rd_req'
compat_recv.o(.text+0x875): undefined reference to `krb_mk_priv'
compat_recv.o(.text+0x8ad): undefined reference to `krb_net_write'
compat_recv.o(.text+0x8ea): undefined reference to `krb_net_write'
compat_recv.o(.text+0x913): undefined reference to `krb_net_write'
/usr/local/krb5/1.2.2/lib/libkrb5.a(auth_con.o): In function 
`krb5_auth_con_initivector':
auth_con.o(.text+0x5e6): undefined reference to `krb5_c_block_size'
/usr/local/krb5/1.2.2/lib/libkrb5.a(init_ctx.o): In function `init_common':
init_ctx.o(.text+0x143): undefined reference to `krb5_c_random_seed'
/usr/local/krb5/1.2.2/lib/libkrb5.a(init_ctx.o): In function 
`krb5_set_default_in_tkt_ktypes':
init_ctx.o(.text+0x3ea): undefined reference to `valid_enctype'
/usr/local/krb5/1.2.2/lib/libkrb5.a(init_ctx.o): In function 
`get_profile_etype_list':
init_ctx.o(.text+0x65f): undefined reference to `krb5_string_to_enctype'
/usr/local/krb5/1.2.2/lib/libkrb5.a(init_ctx.o): In function 
`krb5_set_default_tgs_ktypes':
init_ctx.o(.text+0x777): undefined reference to `valid_enctype'
/usr/local/krb5/1.2.2/lib/libkrb5.a(kdc_rep_dc.o): In function 
`krb5_kdc_rep_decrypt_proc':
kdc_rep_dc.o(.text+0x6a): undefined reference to `krb5_c_decrypt'
/usr/local/krb5/1.2.2/lib/libkrb5.a(preauth.o): In function 
`obtain_sam_padata':
preauth.o(.text+0xb8d): undefined reference to `krb5_encrypt_data'
/usr/local/krb5/1.2.2/lib/libkrb5.a(preauth2.o): In function `pa_sam':
preauth2.o(.text+0x810): undefined reference to `krb5_c_string_to_key'
preauth2.o(.text+0x8e1): undefined reference to `krb5_c_string_to_key'
preauth2.o(.text+0x9ee): undefined reference to `krb5_encrypt_data'
/usr/local/krb5/1.2.2/lib/libkrb5.a(rd_req_dec.o): In function 
`decrypt_authenticator':
rd_req_dec.o(.text+0x85f): undefined reference to `krb5_c_decrypt'
/usr/local/krb5/1.2.2/lib/libkrb5.a(decrypt_tk.o): In function 
`krb5_decrypt_tkt_part':
decrypt_tk.o(.text+0xf): undefined reference to `valid_enctype'
decrypt_tk.o(.text+0x65): undefined reference to `krb5_c_decrypt'
/usr/local/krb5/1.2.2/lib/libkrb5.a(enc_helper.o): In function 
`krb5_encrypt_helper':
enc_helper.o(.text+0x1d): undefined reference to `krb5_c_encrypt_length'
enc_helper.o(.text+0x79): undefined reference to `krb5_c_encrypt'
/usr/local/krb5/1.2.2/lib/libkrb5.a(gen_seqnum.o): In function 
`krb5_generate_seq_number':
gen_seqnum.o(.text+0x21): undefined reference to `krb5_c_random_seed'
gen_seqnum.o(.text+0x56): undefined reference to `krb5_c_random_make_octets'
/usr/local/krb5/1.2.2/lib/libkrb5.a(ktf_g_ent.o): In function 
`krb5_ktfile_get_entry':
ktf_g_ent.o(.text+0x9b): undefined reference to `krb5_c_enctype_compare'
/usr/local/krb5/1.2.2/lib/libdes425.a(key_sched.o): In function 
`des_key_sched':
key_sched.o(.text+0xd): undefined reference to `mit_des_key_sched'
collect2: ld returned 1 exit status
make[1]: *** [popper] Error 1
make[1]: Leaving directory `/usr/local/src/qpopper4.0.3/popper'
make: *** [popper_server] Error 2


Date: Fri, 6 Jul 2001 11:22:47 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: what's this .cache file and why it remains

On Fri, Jul 06, 2001 at 02:55:35PM -0400, Homer Wilson Smith wrote:
>     I notice that the .cache files and temp drop files
> are by default put in /var/spool/mail.  Historically we
> have this extra stuff in /var/spool/popdrop on a different
> spindle.  But then we can't use the mv command to rename
> the tmp file to the main mailbox, right?

  Yes, it's a trade-off.

  The other trade-off someone pointed out is that if you use hard user
quotas on the mail partition, then popper will be unable to allocate
space for the temp file once the user is past half their hard quota.

  There is an option to put the cache files somewhere else should you
want to.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Mon, 09 Jul 2001 01:33:33 -0500
From: rxmendoz <rudy at planetlink dot net>
Subject: Re: mail all users

Thanks much too all that responded,

you guys rock!!

Do any of you know of any good way to restrict who can mail the allusers at isp dot com  now that it was
created?

or should i just comment out the  allusers  alias until i need to use it?

Thanks,
Rudy


Kenneth Porter wrote:

> On Wed, 4 Jul 2001 13:12:06 -0700, Alex M wrote:
>
> >Its done with an MTA, if you are running sendmail or any other sendmail-ish
> >MTA, read this chapter on how-to email all users:
> >
> >http://www.sendmail.org/faq/section4.html#4.21
>
> I keep all my legitimate users in /etc/mail/virtusertable, so I just
> build my aliases from that, grepping out a few special names like
> "postmaster". I added the command to the Makefile in /etc/mail, so the
> alias file gets rebuilt along with virtusertable.db just by typing
> "make".
>
> However, it would be nice to have a tool that could receive mail from
> sendmail and that would reformat it and deposit it in the bulletins
> directory with the next bulletin number. Sendmail has the ability to
> run a program for a given alias, so the tool could be hooked to that.
> For example, in /etc/aliases, one could have:
>
> bulletin: |/usr/local/sbin/make-bulletin
>
> For security, one could gpg-sign one's post and make-bulletin could
> check the signature before processing it. (It could deliver posts with
> failed sigs to the abuse alias.)
>
> Ken
> mailto:shiva at well dot com
> http://www.sewingwitch.com/ken/
> [If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]


From: "Matt Goyer" <mgoyer at fairtunes dot com>
Subject: Encrypted Private Key
Date: Mon, 9 Jul 2001 12:06:47 -0400

Is it at all possible to use an encrypted private key with Qpopper?

Thanks.

From: "bobw" <wrf7 at qwest dot net>
Subject: i/o Broken pipe
Date: Mon, 9 Jul 2001 08:44:16 -0600

Was there ever an answer to why this error occurs? If yes, can someone
please let me know which archive.

I/O error flushing output to client ....Broken pipe (32)

Thank you,
bobw






Date: Mon, 9 Jul 2001 07:57:08 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: mail all users

> Date: Mon, 09 Jul 2001 01:33:33 -0500
> From: rxmendoz <rudy at planetlink dot net>

[...snip...]
> 
> Do any of you know of any good way to restrict who can mail the
> allusers at isp dot com  now that it was created?

Do you have a 'mail gateway' - a machine that *all* mail goes through
before delivery to the end user?  If so, have the same aliases file
there as are onthe internal network and just do not define your
<allusers at isp dot com> alias there.  Internally, the alias would be
defined, but if the alias is not on your mail gateway, external users
just get "Unknown user"...

My $0.02.

Regards,
Gregory Hicks

> 
> or should i just comment out the  allusers  alias until i need to use it?
> 
> Thanks,
> Rudy
> 
> 
> Kenneth Porter wrote:
> 
> > On Wed, 4 Jul 2001 13:12:06 -0700, Alex M wrote:
> >
> > >Its done with an MTA, if you are running sendmail or any other sendmail-ish
> > >MTA, read this chapter on how-to email all users:
> > >
> > >http://www.sendmail.org/faq/section4.html#4.21
> >
> > I keep all my legitimate users in /etc/mail/virtusertable, so I just
> > build my aliases from that, grepping out a few special names like
> > "postmaster". I added the command to the Makefile in /etc/mail, so the
> > alias file gets rebuilt along with virtusertable.db just by typing
> > "make".
[...snip...]
---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com


From: "Gene Bomgardner" <glbj at bellatlantic dot net>
Date: Mon, 9 Jul 2001 09:08:45 -0400
Subject: Bulletin From line woes

HI. I've just compiled and installed Qpopper 4.0.3 on my FreeBSD 
4.3 box. It works quite well with one exception so far. When 
attempting to send a bulletin (file named 00001.test) it produces an 
error message to the effect that the first line of the file is not a valid 
From seperator. I've tried various permutations of the first line to no 
avail. I've even copied the header from the docs character for 
character (unless tabs are required somewhere). The From line is 
indeed the first line in the file. The entire message is shown below.
Anyone have any ideas? I'm probably missing something simple 
here; I just can't see it.

From glb Sat Jul 7 13:53:00 2001
Date: Sat July 7 2001 13:00:00
To: user@localhost
From:POP Administrator <postmaster at Bomgardner dot net>
Subject: Initial test bulletin.

this is test bulletin one.


Date: Mon, 09 Jul 2001 13:13:51 -0400
From: Jack Sasportas <jack at innovativeinternet dot com>
Subject: Security Question with temp files...

I added the option
    --enable-cache-dir=/var/spool/mail/temp
so that I can seperate all those .cache files from the mail spool files,
but I started getting security errors when the users attempted to write
the file as they popped their accounts, can you tell me what the propper
security setting is for that new temp directory?

PS I did try several including nobody:nobody etc, but no luck..

THanks !

--
___________________________________________________________
Jack Sasportas
Innovative Internet Solutions
Phone 305.665.2500
Fax 305.665.2551
www.innovativeinternet.com
www.web56.net



From: "Kenneth Porter" <shiva at well dot com>
Date: Mon, 09 Jul 2001 10:56:56 -0700
Subject: Re: Security Question with temp files...

On Mon, 09 Jul 2001 13:13:51 -0400, Jack Sasportas wrote:

>I added the option
>    --enable-cache-dir=/var/spool/mail/temp
>so that I can seperate all those .cache files from the mail spool files,
>but I started getting security errors when the users attempted to write
>the file as they popped their accounts, can you tell me what the propper
>security setting is for that new temp directory?

Probably the same setting used for the /var/spool/mail directory. Pay
special attention to the ownership of the directory.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



From: "Matt Goyer" <mgoyer at fairtunes dot com>
Subject: Poprelayd & Scanaddr & Qpopper
Date: Mon, 9 Jul 2001 13:19:36 -0400

Does anyone have a scanaddr that works with Qpopper 4.0.x when ./configured
with --enable-log-login?

I'm no perl expert..
Thanks,
Matt


Date: Mon, 9 Jul 2001 08:41:51 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Security Question with temp files...

On Mon, Jul 09, 2001 at 01:13:51PM -0400, Jack Sasportas wrote:
> I added the option
>     --enable-cache-dir=/var/spool/mail/temp
> so that I can seperate all those .cache files from the mail spool files,
> but I started getting security errors when the users attempted to write
> the file as they popped their accounts, can you tell me what the propper
> security setting is for that new temp directory?

Permissions should be such that any user can create a file and write to
their own file but nobody can delete anybody else's file.  This usually
requires the "sticky bit" to be set; it should normally be identical to
the permissions and ownership on /var/mail and frequently to those on
/tmp.

On this system it shows up in ls as:

"drwxrwxrwt  root  wheel"

Note the "t" indicating the sticky bit is set.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Mon, 09 Jul 2001 13:44:34 -0400
From: Jack Sasportas <jack at innovativeinternet dot com>
Subject: Re: Security Question with temp files...

Let me re-phrase a little of the question, what is the best setting security
wise to do this... like chmod 777 maybe too open...

Thanks

Jack Sasportas wrote:

> I added the option
>     --enable-cache-dir=/var/spool/mail/temp
> so that I can seperate all those .cache files from the mail spool files,
> but I started getting security errors when the users attempted to write
> the file as they popped their accounts, can you tell me what the propper
> security setting is for that new temp directory?
>
> PS I did try several including nobody:nobody etc, but no luck..
>
> THanks !
>
> --
> ___________________________________________________________
> Jack Sasportas
> Innovative Internet Solutions
> Phone 305.665.2500
> Fax 305.665.2551
> www.innovativeinternet.com
> www.web56.net

--
___________________________________________________________
Jack Sasportas
Innovative Internet Solutions
Phone 305.665.2500
Fax 305.665.2551
www.innovativeinternet.com
www.web56.net



Date: Mon, 9 Jul 2001 09:31:09 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Security Question with temp files...

On Mon, Jul 09, 2001 at 01:44:34PM -0400, Jack Sasportas wrote:
> Let me re-phrase a little of the question, what is the best setting security
> wise to do this... like chmod 777 maybe too open...

As I said in my previous note, you must use the "sticky bit", i.e.
chmod 1777.  That behaves significantly differently than 777.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Last updated on 9 Jul 2001 by Pensive Mailing List Admin