| View previous topic :: View next topic |
| Author |
Message |
peterk0
Apprentice
Joined: 25 Mar 2003
Posts: 188
Location: Prague
|
 Posted: Mon Jun 09, 2003 9:39 am Post subject: |
 |
|
Hey, succesfully instaled on second server so far!
ONLY one thing...
Don't you know how to set up a chracterset, i need central european, this should be just for fechmail or procmail, because i'm using this server only to recieve emails. 
LMK, thx |
|
| Back to top |
|
 |
Rocker
n00b
Joined: 12 Dec 2002
Posts: 67
Location: The Netherlands
|
| Posted: Mon Jun 09, 2003 9:42 am Post subject: |
|
|
I'm already in the cron group, and have changed the ownership of /usr/bin/crontab to root.cron.
When I try to install an new cronjob with crontab -e I now get the message:
seteuid: Operation not permitted
Any idea??? |
|
| Back to top |
|
|
peterk0
Apprentice
Joined: 25 Mar 2003
Posts: 188
Location: Prague
|
| Posted: Mon Jun 09, 2003 9:43 am Post subject: |
|
|
Heeey solved already, just need to setup a font in your favorite email program =)
For me Sylpheed-Claws just RULEZ!
Seeya  |
|
| Back to top |
|
|
beowulf
Apprentice
Joined: 07 Apr 2003
Posts: 225
|
| Posted: Mon Jun 09, 2003 9:30 pm Post subject: |
|
|
peterk0: Glad it worked!
Rocker: Hmm, is one of the partitions mounted with the setuid bit off? When you changed the permissions, did you remove the setuid bit?
Other than that, I'd ask in the Other things Gentoo forum... I'm not really sure what's going on... and getting a broader audience for your question would receive better answers.
_________________
I have nothing witty to say here... ever  |
|
| Back to top |
|
|
Rocker
n00b
Joined: 12 Dec 2002
Posts: 67
Location: The Netherlands
|
| Posted: Tue Jun 10, 2003 10:45 am Post subject: |
|
|
AFAIK, I haven't mount it in any special way, so I guess that everything is quite normal??
Anyhow, I posted a new message in another part of the Gentoo forums, because where are a bit off-topic now.
So far: thanks for your great howto and support!!! |
|
| Back to top |
|
|
mscriv
n00b
Joined: 12 Jun 2003
Posts: 1
|
| Posted: Thu Jun 12, 2003 7:39 am Post subject: relayhost |
|
|
I had problems sending e-mails to the outside world. I think postfix uses MX records to find where to send e-mail unless a relay host is specified in square brackets in /etc/postfix/main.cf.
relayhost = [smtp.isp.com]
Some text from /etc/postfix/sample/sample-misc.cf:
# The relayhost parameter specifies the default host to send mail to
# when no entry is matched in the optional transport(5) table. When
# no relayhost is given, mail is routed directly to the destination.
#
# On an intranet, specify the organizational domain name. If your
# internal DNS uses no MX records, specify the name of the intranet
# gateway host instead.
#
# In the case of SMTP, specify a domain, host, host:port, [host]:port,
# [address] or [address]:port; the form [host] turns off MX lookups. |
|
| Back to top |
|
|
puddpunk
l33t
Joined: 20 Jul 2002
Posts: 681
Location: New Zealand
|
| Posted: Thu Jun 12, 2003 9:32 am Post subject: |
|
|
| Rocker wrote: | I'm already in the cron group, and have changed the ownership of /usr/bin/crontab to root.cron.
When I try to install an new cronjob with crontab -e I now get the message:
seteuid: Operation not permitted
Any idea??? |
Yeah, Have a look in your /etc directory for cron.allow or something. If you are using fcron, you need to add your user into that list.
| Code: | | find /etc -name "cron.allow" |
Or maybe it's fcron.allow. I can't remember :\ |
|
| Back to top |
|
|
Rocker
n00b
Joined: 12 Dec 2002
Posts: 67
Location: The Netherlands
|
| Posted: Thu Jun 12, 2003 10:07 am Post subject: |
|
|
NOI, as if you could see in an earlier post (on page 3), I'm already in the cron group, and also listed in the cron.allow file. 
However, thanks for trying to help me, that's where forums are for, isn't it?? 
BTW: the problem is solved already, I changed the permissions with chmod g+s crontab, and now it's working. I know that this solution has something to do with setting uid or something like that, but I don't know what it does exactly...  I received the tip from anybody else on this forum, and it helped! |
|
| Back to top |
|
|
beowulf
Apprentice
Joined: 07 Apr 2003
Posts: 225
|
| Posted: Thu Jun 12, 2003 8:24 pm Post subject: Re: relayhost |
|
|
mscriv Thanks for trying it out! Normally that is correct, however in this setup, we tell Postfix to use sasl and the SMPT server listed in the saslpass file. We're doing this because as you said, we don't have a MX record. If you're still having trouble, please post your /etc/postfix/main.cf with this command:
| Code: | | grep -v "^#" /etc/postfix/main.cf | sed '/./,/^$/!d' |
_________________
I have nothing witty to say here... ever |
|
| Back to top |
|
|
DefconAlpha
Apprentice
Joined: 25 Feb 2003
Posts: 151
Location: Alabama
|
| Posted: Thu Jun 12, 2003 9:13 pm Post subject: two things |
|
|
Two things...
First: you will probably have to emerge pine-maildir instead of pine if you want maildir support
Second: try emerging getmail. it's so freakin easy :)
_________________
In the end, the love you get is equal to the love you make
--John Lennon & Paul McCartney (The End - Abbey Road, |
|
| Back to top |
|
|
dispatriot
n00b
Joined: 13 Jun 2003
Posts: 4
|
| Posted: Fri Jun 13, 2003 5:24 pm Post subject: |
|
|
I, too, have completed the guide. And I, too, am having issues.
Authentication is all set up and working great. I have absolutely no problems accessing my inbox on my postfix server or sending mail via smtp (using outlook as client.) The only problem is, there's no mail. If I send mail via Pine to, for instance, dispatriot@localhost... the email goes through and it will show up in my outlook client. (Interestingly, not in the Pine INBOX folder.) I'm fairly certain the server is recieving the email, because I did get one of these:
| Code: |
This is the Postfix program at host victorygin.ccci.org.
I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.
For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can
delete your own text from the message returned below.
The Postfix program
<dispatriot@10.10.2.162>: mail for 10.10.2.162 loops back to myself
|
When I tried to send an email to dispatriot@myserver'sip from outlook.
It's kinda funny... I had a success like the one mentioned above with my redhat 9 server where everything "just worked." I was really counting on it for this project!
Any ideas? |
|
| Back to top |
|
|
beowulf
Apprentice
Joined: 07 Apr 2003
Posts: 225
|
| Posted: Sat Jun 14, 2003 2:23 am Post subject: |
|
|
dispatriot - Thanks for trying the guide. I'm glad it worked for you for the most part.
Could you post your postfix/main.cf file?
| Code: | | grep -v "^#" /etc/postfix/main.cf | sed '/./,/^$/!d' |
Also, your aliases file which could be "/etc/mail/aliases"
I've never seen that error even when I have sent an email to myself. That said, i'll wait to hear back from you before trying to figure out what's going on.
_________________
I have nothing witty to say here... ever |
|
| Back to top |
|
|
Enclavet
n00b
Joined: 15 Jun 2003
Posts: 25
|
| Posted: Sun Jun 15, 2003 6:05 am Post subject: Problems with Postfix |
|
|
I am having problems with postfix. I can start postfix just fine and when I do /etc/init.d/postfix start it has the regular [ok]. However when I try to restart or stop like /etc/init.d/postfix stop restart I get [!!] meaning it didnt go through. Logs dont show any problems. I'm wondering what could be causing this? I cant even connect to Postfix also. When I try to use KMail to send email it says my ip is broken or cant connect. I can receive but not send.
Also i'm wondering how would I set something up so that other computers on the network including windows computers could use the mail server?
I would add all the emails to be downloaded in fetchmail and then try to distribute them to different inboxes for outlook to retrieve. I want a centralized spam filtering system.
Thanks. |
|
| Back to top |
|
|
Proteus
Guru
Joined: 14 Jul 2002
Posts: 346
Location: Hamburg, Germany
|
| Posted: Sun Jun 15, 2003 4:13 pm Post subject: |
|
|
Hi Enclavet!
I do not know what is wrong with your postfix server or kmail, I think others are far more qualified to help you with those things...
However, I can try to answer your other questions:
1) You can use this setup with any email-client that is imap enabled (therefore you can use outlook or outlook express, I speak from experience here  )
2) In Order to distribute your emails from different accounts into different inboxes see above in this discussion. It is explained there. And it's really easy. Only some new lines in your .procmailrc.
3) Centralized Spam filtering system:
I do want to use something like this as well. I know it is possible when you emerge spamassassin (there is also some anti-virus scanning daemon in portage if you want that functionality as well).
However, I am currently tryin to find out how spamassassin is configured for myself and have no clue as of now...
Maybe someone can give us both a hint as to where some documentation can be found for that topic.
_________________
Greetings,
Proteus |
|
| Back to top |
|
|
Enclavet
n00b
Joined: 15 Jun 2003
Posts: 25
|
| Posted: Sun Jun 15, 2003 6:55 pm Post subject: Hotmail |
|
|
Yeah I got the multiple users working but not the SMTP stuff..
I was wondering however how I would beable to get hotmail emails? Is there a way to place getmail > fetchmail into the process somewhere? |
|
| Back to top |
|
|
beowulf
Apprentice
Joined: 07 Apr 2003
Posts: 225
|
| Posted: Mon Jun 16, 2003 4:38 am Post subject: |
|
|
Enclavet: Great to hear that receiving is working for you. Do you think you could post the output from this command:
| Code: | | grep -v "^#" /etc/postfix/main.cf | sed '/./,/^$/!d' |
Hotmail has it's own system in place... There's probably a way to do it with getmail/fetchmail... but I do not know it...
Spam Assasin should be placed in your procmailrc file.. but i've never configured it.... There was a guide a while back about spam assasin... and it should detail how to set it up.
_________________
I have nothing witty to say here... ever |
|
| Back to top |
|
|
taskara
Advocate
Joined: 10 Apr 2002
Posts: 3763
Location: Australia
|
| Posted: Mon Jun 16, 2003 4:39 am Post subject: |
|
|
HI, great work!!
I have a little problem.. it's probably something stupid I'm doing. I am trying to re-create the ssl certificates (under section 3.6) so that they don't need a password.
I have editted the openssl.cnf file with my info, and have added -nodes to the CA.pl file, as per instructions.
when I try and create the files via ./CA.pl -newca it asks me to specify a password. | Quote: | root@server misc # ./CA.pl -newca
CA certificate filename (or enter to create)
Making CA certificate ...
Using configuration from /etc/ssl/openssl.cnf
Generating a 1024 bit RSA private key
............++++++
...++++++
writing new private key to './demoCA/private/cakey.pem'
Enter PEM pass phrase:
|
am I suppossed to put in a password here? and is so, make one up or root password? also, what do I put as the filename ? (I assume newcert.pem and etc)
sorry for my newbie questions! I've never had to re-create my ssl certs before! 
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer! |
|
| Back to top |
|
|
Enclavet
n00b
Joined: 15 Jun 2003
Posts: 25
|
| Posted: Mon Jun 16, 2003 5:29 am Post subject: |
|
|
Heres the output:
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
inet_interfaces = $myhostname, localhost
mydestination = $myhostname, localhost.$mydomain
unknown_local_recipient_reject_code = 450
mynetworks = 192.168.1.0/24, 127.0.0.0/8
relay_domains = $mydestination
alias_maps = hash:/etc/mail/aliases
alias_database = hash:/etc/mail/aliases
home_mailbox = Mail/
local_destination_concurrency_limit = 2
default_destination_concurrency_limit = 10
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = postdrop
manpage_directory = /usr/share/man
sample_directory = /etc/postfix/sample
readme_directory = /usr/share/doc/postfix-2.0.9
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/saslpass
smtp_sasl_security_options =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
check_relay_domains
seems that I deleted the tls portion but when I had it in still had the same problems
Also is there a way to create a folder in Imap where my spam would be placed and the client would download in addition to the inbox, the folder called spam??
I cant create any subdirectories other than any subfolders of Inbox. When I try to create an subfolder under my account like Enclavet's Mailbox as I named it I get this error:
"The Current Command did no succeed" The mail server responded: Invalid mailbox name. |
|
| Back to top |
|
|
taskara
Advocate
Joined: 10 Apr 2002
Posts: 3763
Location: Australia
|
| Posted: Mon Jun 16, 2003 8:03 am Post subject: |
|
|
here's part of my /etc/ssl/misc/CA.pl file | Quote: | # create a certificate
system ("$REQ -new -nodes -x509 -keyout newreq.pem -out newreq.pem $
$RET=$?;
print "Certificate (and private key) is in newreq.pem\n"
} elsif (/^-newreq$/) {
# create a certificate request
system ("$REQ -new -nodes -keyout newreq.pem -out newreq.pem $DAYS"$
$RET=$?;
print "Request (and private key) is in newreq.pem\n";
} elsif (/^-newca$/) { |
before when I ran it would ask for a username and password. so I got out of that. now when I run it again, it doesn't ask for anything | Quote: | server misc # ./CA.pl -newca
server misc # |
but it does NOT create the file newcert.pem
so I've stuffed something up somewhere.. could anyone point me in the right direction?
many thanks!
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer! |
|
| Back to top |
|
|
puddpunk
l33t
Joined: 20 Jul 2002
Posts: 681
Location: New Zealand
|
| Posted: Mon Jun 16, 2003 9:02 pm Post subject: |
|
|
| Proteus wrote: | 3) Centralized Spam filtering system:
I do want to use something like this as well. I know it is possible when you emerge spamassassin (there is also some anti-virus scanning daemon in portage if you want that functionality as well).
However, I am currently tryin to find out how spamassassin is configured for myself and have no clue as of now...
Maybe someone can give us both a hint as to where some documentation can be found for that topic. |
HINT: .procmailrc
SPOILER: | Code: | | # zcat /usr/share/doc/Mail-SpamAssassin-2.44/procmail.example.gz |
| Code: | # SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
:0fw
* < 256000
| spamassassin
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
almost-certainly-spam
# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "probably-spam".
:0:
* ^X-Spam-Status: Yes
probably-spam
# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped. This will re-add it.
:0 H
* ! ^From[ ]
* ^rom[ ]
{
LOG="*** Dropped F off From_ header! Fixing up. "
:0 fhw
| sed -e 's/^rom /From /'
} |
I just left out the 2nd recipie (the one about a 15 or higher spam score) and just got procmail to filter everything with the spam flag into a directory called Spam
HTH,
Cheers,
Chris.
P.S. beowulf, bogofilter can be easily intergrated into this type of set up. You could set a cron job to train it, and let it read a Maildir in ~/.maildir called spam/ or something. So if you get spam, move it into spam/, and caught spam gets moved into spam/ too.
If you give me a little while, I could come up with something for this |
|
| Back to top |
|
|
beowulf
Apprentice
Joined: 07 Apr 2003
Posts: 225
|
| Posted: Mon Jun 16, 2003 10:43 pm Post subject: |
|
|
taskara:
Great news... You fixed your own problem... almost... I believe you left out the word $DAYS on the new create a certificate stage. Here's how your codeblock in my file looks like:
| Code: |
# create a certificate
system ("$REQ -new -nodes -x509 -keyout newreq.pem -out newreq.pem $DAYS
");
$RET=$?;
print "Certificate (and private key) is in newreq.pem\n"
} elsif (/^-newreq$/) {
# create a certificate request
system ("$REQ -new -nodes -keyout newreq.pem -out newreq.pem $DAYS");
$RET=$?;
print "Request (and private key) is in newreq.pem\n";
} elsif (/^-newca$/) {
|
Hope this does it...
Enclavet:
Everything looks okay in your postfix file... But since you can't connect and the daemon is having problems stoping... well that leads me to believe it is a postfix configuration problem...
A few basic questions... Is there a firewall? Is your hostname working okay? Did running postfixcheck spit out any errors?
Also, I wonder about this:
unknown_local_recipient_reject_code = 450
What if you changed it to 550? I know 450 would be better... but I've read things about 450 giving people problems...
Are you using two computers? Are you attempting to use Postfix to send localmail from one computer on your lan to the server, then out to another computer on the lan?
what does nmap tell you? Is 25 open? /etc/hosts and hosts.[allow|deny] looking okay?
Do you have any other *.cf files in /etc/postfix/ that could be appending additional values (not including the sample dir).
Was Postfix compiled with the use flag "sasl" and did you create the necessary sasl files and edit /usr/lib/sasl2/smtpd.conf?
RE: | Quote: | | I cant create any subdirectories other than any subfolders of Inbox. When I try to create an subfolder under my account like Enclavet's Mailbox as I named it I get this error: |
What about trying to name a subfolder "Enclavets.Mailbox" or something... maybe it's choking on the single quotes... Not sure...
puddpunk:
Thanks for chiming in on the spamassassin issue... I've never needed it since i do all my filtering on the IMAP server @ fastmail...
If you came up with a bogofilter guide... I would, with your premisssion add it to the front page of this guide as a new section.... Thanks again
_________________
I have nothing witty to say here... ever |
|
| Back to top |
|
|
taskara
Advocate
Joined: 10 Apr 2002
Posts: 3763
Location: Australia
|
| Posted: Mon Jun 16, 2003 10:54 pm Post subject: |
|
|
thanks for the reply beowulf, I really appreciate it.
this is driving me a little batty.. I can't seem to get it to create my newcert.pem
I checked my CA.pl file, and I think I DO have DAYS here (I think the previous quote was wrapped, so you couldn't see it ) here it is unwrapped | Quote: | # create a certificate
system ("$REQ -new -nodes -x509 -keyout newreq.pem -out newreq.pem $DAYS");
$RET=$?;
print "Certificate (and private key) is in newreq.pem\n"
} elsif (/^-newreq$/) {
# create a certificate request
system ("$REQ -new -nodes -keyout newreq.pem -out newreq.pem $DAYS");
$RET=$?;
print "Request (and private key) is in newreq.pem\n";
|
I UNemerged openssl, deleted the /etc/ssl dir and all files under it, and re-emerged openssl, re-editted the files, and still have the same problem. except now when I run it asks for a name, so I type newcert.pem, and it finishes but creates nothing. if I go on to do the other steps, I get the following error, and I can't find newcert.pem ANYWHERE! lol | Quote: | root@server misc # ./CA.pl -newca
root@server misc #
root@server misc # ./CA.pl -newreq
Using configuration from /etc/ssl/openssl.cnf
Generating a 1024 bit RSA private key
...............++++++
.............++++++
writing new private key to 'newreq.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [ACT]:
Locality Name (eg, city) []:
Organization Name (eg, company) [smartclan and co]:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
Request (and private key) is in newreq.pem
root@server misc # ./CA.pl -sign
Using configuration from /etc/ssl/openssl.cnf
unable to load CA private key
4074:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:666:Expecting: ANY PRIVATE KEY
Signed certificate is in newcert.pem
root@server misc #
|
sorry to hassle you... any thoughts ?
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer! |
|
| Back to top |
|
|
kram
n00b
Joined: 29 Nov 2002
Posts: 35
|
| Posted: Tue Jun 17, 2003 12:38 am Post subject: |
|
|
taskara: I think you need to put stuff in all those fields it asks for. City = Canberra ? etc...
Anyway great guide I set it up the same, except I used .forward files to forward mail from all my different accounts straight to my postfix server. No need for fetchmail anymore, and its only using bandwidth when necessary |
|
| Back to top |
|
|
taskara
Advocate
Joined: 10 Apr 2002
Posts: 3763
Location: Australia
|
| Posted: Tue Jun 17, 2003 1:46 am Post subject: |
|
|
| kram wrote: | | taskara: I think you need to put stuff in all those fields it asks for. City = Canberra ? etc... |
I think filling in the details is optional - and the -newca doesn't seem to ask for the info. I will try again anyway with all the info (the lack of details on my quote was from the -newreq section.)
| kram wrote: | | Anyway great guide I set it up the same, except I used .forward files to forward mail from all my different accounts straight to my postfix server. No need for fetchmail anymore, and its only using bandwidth when necessary |
that sounds veryinteresting.. if only I could get past this ssl problem I'd look into it... sigh
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer! |
|
| Back to top |
|
|
taskara
Advocate
Joined: 10 Apr 2002
Posts: 3763
Location: Australia
|
| Posted: Tue Jun 17, 2003 2:41 am Post subject: |
|
|
ok
I've re-emerged openssl and re run
it asks me | Quote: | | CA certificate filename (or enter to create) |
I just press enter.
then it continues asking | Quote: | Making CA certificate ...
Using configuration from /etc/ssl/openssl.cnf
Generating a 1024 bit RSA private key
...........................++++++
.................++++++
writing new private key to './demoCA/private/cakey.pem'
Enter PEM pass phrase:
|
if I just press "enter" it says | Quote: | Enter PEM pass phrase:
Verifying password - Enter PEM pass phrase:
phrase is too short, needs to be at least 4 chars
Enter PEM pass phrase:
|
what do I put in for the PEM pass phrase ?
looks like I'm getting somewhere.. thanks!
_________________
Kororaa install method - have Gentoo up and running quickly and easily, fully automated with an installer! |
|
| Back to top |
|
|
|
Documentation, Tips & Tricks
