Qmail - Revision history

Kamran: /* Todo */

Kamran — Wed, 10 Apr 2013 08:56:46 GMT

Todo

← Older revision		Revision as of 08:56, 10 April 2013
Line 4,094:		Line 4,094:
	** Razor		** Razor
	* JMS Queue analyzer : http://qmail.jms1.net/scripts/qlanalyze		* JMS Queue analyzer : http://qmail.jms1.net/scripts/qlanalyze
-	* Automate creation of CDB files automatically. http://qmail.jms1.net/scripts/qmail-updater.shtml	+	* Automate creation of CDB files automatically. http://qmail.jms1.net/scripts/qmail-updater.shtml (See the update-qmail.sh)
	* Mail graphs ???		* Mail graphs ???
-	* vpopmail and qmailadmin onchange script	+	* vpopmail and qmailadmin onchange script (See the update-qmail.sh)

Kamran: /* Todo */

Kamran — Wed, 10 Apr 2013 08:54:48 GMT

Todo

← Older revision		Revision as of 08:54, 10 April 2013
Line 3,996:		Line 3,996:
	@40000000515fed682157ba7c tcpserver: status: 0/30		@40000000515fed682157ba7c tcpserver: status: 0/30
	</pre>		</pre>
		+
		+	==update-qmail.sh==
		+	The update-qmail.sh script must be set in cron to run every minute. It checks for changes in the CDB files by generating temporary ones and comparing them to the older ones. If it detects any difference, it re-creates new CDB files and restarts qmail to load the new values.
		+
		+	<b>/usr/local/bin/update-qmail.sh </b>
		+	<pre>
		+	#!/bin/bash
		+	# Author: Muhammad Kamran Azeem
		+	# Licence: GPL v2
		+	# Created: 20130409
		+	# Updated: 20130409
		+	# Description: Checks the difference of auth.cdb and validrcptto.cdb with earlier versions of same files
		+	# If changes are found, the script restarts qmail service to load new values.
		+	# Changelog: At the end of the script.
		+	#########################################################################################################
		+
		+	######## Start - User configurable Section
		+	# Qmail directory. Adjust of your qmail lives somewhere else.
		+	VQ=/var/qmail
		+
		+	# Path to qmailctl program
		+	QMAILCTL=/usr/bin/qmailctl
		+
		+	# Path to ValidRCPTTo CDB file
		+	VRCPTFILE=$VQ/control/validrcptto.cdb
		+
		+	# Path to Auth CDB file
		+	AUTHFILE=$VQ/control/auth.cdb
		+
		+	# Path to mkauth program
		+	MKAUTH=/usr/local/bin/mkauth
		+
		+	# Path to mkvalidrcptto program
		+	MKVRCPT=/usr/local/bin/mkvalidrcptto
		+
		+	######## End - User configurable Section
		+
		+
		+
		+	# You don't need to modify anything in the section below.
		+
		+	######## Start - Actual program code
		+
		+	# mkauth -c /tmp/auth.cdb.new
		+	# mkvalidrcptto -c /tmp/validrcptto.cdb.new
		+	# SUM1=$(md5sum auth.cdb \| cut -f 1 -d ' ')
		+	# SUM2=$(md5sum auth.cdb.new \| cut -f 1 -d ' ')
		+	# if [ "$SUM1" == "$SUM2" ] ; then echo "Equal" ; else echo "Different"; fi
		+
		+	# Check if the files exist
		+	if [ -d $VQ ] && [ -x $QMAILCTL ] && [ -r $VRCPTFILE ] && [ -r $AUTHFILE ] && [ -x $MKAUTH ] && [ -x $MKVRCPT ] ; then
		+	echo "Files specified in configuration section exist. Good! Proceeding to run the script"
		+	else
		+	echo "One of the files or programs is missing. Please check and re-run the script."
		+	exit 9
		+	fi
		+
		+	# Generate a new auth cdb file in /tmp:
		+	$MKAUTH -c /tmp/auth.cdb.new
		+
		+	# Generate a new validrcptto file in /tmp:
		+	$MKVRCPT -c /tmp/validrcptto.cdb.new
		+
		+	# Generate SUM of old and new auth file:
		+	AUTHSUMOLD=$(md5sum $AUTHFILE \| cut -f1 -d ' ')
		+	AUTHSUMNEW=$(md5sum /tmp/auth.cdb.new \| cut -f1 -d ' ')
		+
		+	# Generate SUM of old and new validrcptto file:
		+	VRCPTSUMOLD=$(md5sum $VRCPTFILE \| cut -f1 -d ' ')
		+	VRCPTSUMNEW=$(md5sum /tmp/validrcptto.cdb.new \| cut -f1 -d ' ')
		+
		+
		+	if [ "$AUTHSUMOLD" != "$AUTHSUMNEW" ] \|\| [ "$VRCPTSUMOLD" != "$VRCPTSUMNEW" ] ; then
		+	logger -s "qmail - Auth CDB or ValidRCPTTo CDB has changed. Need to restart qmail with new CDBs."
		+	logger -s "qmail - Creating CDB $VRCPTFILE ..."
		+	$MKVRCPT -c $VRCPTFILE
		+	logger -s "qmail - Creating CDB $AUTHFILE ..."
		+	$MKAUTH -c $AUTHFILE
		+	$QMAILCTL restart
		+	logger -s "qmail - CDBs recreated. qmail service restarted."
		+	else
		+	echo "qmail - No changes found in Auth CDB or ValidRCPTTo CDB."
		+	# No need to fill the log with "No changes found" message
		+	# logger -s "qmail - No changes found in Auth CDB or ValidRCPTTo CDB."
		+	fi
		+
		+	exit $?
		+
		+	######## End - Actual program code
		+	</pre>
		+

	==Todo==		==Todo==

Kamran: /* SMTP-AUTH */

Kamran — Wed, 10 Apr 2013 08:51:34 GMT

SMTP-AUTH

← Older revision		Revision as of 08:51, 10 April 2013
Line 3,960:		Line 3,960:
	</pre>		</pre>

-	<b>Note: You will need to recreate the CDB file each time you add or remove an email account.</b>	+	<b>Note: You will need to recreate the CDB file each time you add,remove, or change password of an email account. </b> Check the <b>update-qmail.sh</b> script further below in this document.

	Enable the following options in the qmail-smtpd/run file:		Enable the following options in the qmail-smtpd/run file:

Kamran: /* SMTP-AUTH */

Kamran — Wed, 10 Apr 2013 08:49:29 GMT

SMTP-AUTH

← Older revision		Revision as of 08:49, 10 April 2013
Line 3,896:		Line 3,896:

	==SMTP-AUTH==		==SMTP-AUTH==
-
	Discussion about SMTP auth and two available methods, as per the following links: ????		Discussion about SMTP auth and two available methods, as per the following links: ????
	* http://qmail.jms1.net/scripts/service-qmail-smtpd-run.shtml		* http://qmail.jms1.net/scripts/service-qmail-smtpd-run.shtml
Line 3,953:		Line 3,952:
	</pre>		</pre>

-	Note: If there are any active qmail-smtpd services using the auth.cdb file, you should not build the file directly - you should build it using a different name, then set the ownership and permissions correctly, and then rename the new file over the old one. The example above assumes that qmail-smtpd is running as the "qmaild" user (which is the standard way to do it.)	+	Note: If there are any active qmail-smtpd services using the auth.cdb file, you should not build the file directly - you should build it using a different name, then set the ownership and permissions correctly, and then rename the new file over the old one. The example above assumes that qmail-smtpd is running as the "qmaild" user (which is the standard way to do it). Still, you can directly create the auth.cdb if you wish so:
		+
		+	<pre>
		+	mkauth -c /var/qmail/control/auth.cdb
		+	chown root:nofiles /var/qmail/control/auth.cdb
		+	chmod 0640 /var/qmail/control/auth.cdb
		+	</pre>

	<b>Note: You will need to recreate the CDB file each time you add or remove an email account.</b>		<b>Note: You will need to recreate the CDB file each time you add or remove an email account.</b>

Kamran: /* The final crontab */

Kamran — Wed, 10 Apr 2013 08:43:44 GMT

The final crontab

← Older revision		Revision as of 08:43, 10 April 2013
Line 3,880:		Line 3,880:
	<pre>		<pre>
	# crontab -l		# crontab -l
		+
	# Run at 0 min (zero minute) of every hour.		# Run at 0 min (zero minute) of every hour.
	0 * * * * /usr/bin/freshclam --quiet		0 * * * * /usr/bin/freshclam --quiet
Line 3,885:		Line 3,886:
	0 1 * * * /usr/local/bin/setuidgid qscand /var/qmail/bin/qmail-scanner-queue.pl -z		0 1 * * * /usr/local/bin/setuidgid qscand /var/qmail/bin/qmail-scanner-queue.pl -z
	0 1 * * * /usr/local/bin/setuidgid qscand /var/qmail/bin/qmail-scanner-queue.pl -g		0 1 * * * /usr/local/bin/setuidgid qscand /var/qmail/bin/qmail-scanner-queue.pl -g
-	# Run ~~at 0 min (zero~~ minute~~) of~~ every ~~hour~~.	+	# Run the following every 1 minute. It updates CDB files and restarts qmail.
-	0 * * * * /usr/local/bin/~~mkvalidrcptto~~ -~~c /var/~~qmail/~~control~~/~~validrcptto.cdb ; killall -HUP qmail-send~~	+	# The ">/dev/null 2>&1" prevents the script to generate any output when run through cron.
-	# Run at 2 AM everyday	+	# If it is not used, the script causes cron to generate an email every minute and
		+	# fills postmaster's Inbox.
		+	/1 * * * /usr/local/bin/update-qmail.sh >/dev/null 2>&1
		+	# Run at 2 AM everyday:
	0 2 * * * /usr/local/sbin/jgreylist-clean		0 2 * * * /usr/local/sbin/jgreylist-clean
	</pre>		</pre>

Kamran: /* Valid RCPT To */

Kamran — Wed, 10 Apr 2013 08:31:18 GMT

Valid RCPT To

← Older revision		Revision as of 08:31, 10 April 2013
Line 3,789:		Line 3,789:
	Ideally there should be some sort of "onchange" trigger, which could re-create the CDB file and restart qmail to load new CDB. vpopmail provides such a functionality (through the use of an external script), but is kind of useless, because qmailadmin - which we use most of the time to create user accounts, does not work well with this functionality.		Ideally there should be some sort of "onchange" trigger, which could re-create the CDB file and restart qmail to load new CDB. vpopmail provides such a functionality (through the use of an external script), but is kind of useless, because qmailadmin - which we use most of the time to create user accounts, does not work well with this functionality.

-	I have created a script which runs every minute and sees if there are any changes in the CDB. If there are, it re-creates CDB files and restarts qmail. For me this is the most robust and affordable solution, without getting into any trouble of patching vpopmail and chasing developers on ~~qmailadmin~~ mailing list. The script can be found further below, and is titled update-qmail.sh.	+	I have created a script which runs every minute and sees if there are any changes in the CDB. If there are, it re-creates CDB files and restarts qmail. For me this is the most robust and affordable solution, without getting into any trouble of patching vpopmail or qmailadmin, and chasing developers on various mailing list. The script can be found further below, and is titled <b>update-qmail.sh</b>.

	Enable the VALIDRCPTTO options in the qmail-smtpd/run file:		Enable the VALIDRCPTTO options in the qmail-smtpd/run file:

Kamran: /* Valid RCPT To */

Kamran — Wed, 10 Apr 2013 08:29:50 GMT

Valid RCPT To

← Older revision		Revision as of 08:29, 10 April 2013
Line 3,787:		Line 3,787:
	Note: You must re-create the CDB file, and restart qmail to reload the new CDB, as soon as you create or remove a user (including mailing lists) from any of the domains managed on this system.		Note: You must re-create the CDB file, and restart qmail to reload the new CDB, as soon as you create or remove a user (including mailing lists) from any of the domains managed on this system.

-	Ideally there should be some sort of "onchange" trigger, which could re-create the CDB file and restart qmail to load new CDB. vpopmail provides such a functionality, but is kind of useless, because ~~qmail,~~ which we use ~~qmailadmin~~ most of the time ~~for~~ user accounts ~~creation~~, does not work well with this functionality.	+	Ideally there should be some sort of "onchange" trigger, which could re-create the CDB file and restart qmail to load new CDB. vpopmail provides such a functionality (through the use of an external script), but is kind of useless, because qmailadmin - which we use most of the time to create user accounts, does not work well with this functionality.

	I have created a script which runs every minute and sees if there are any changes in the CDB. If there are, it re-creates CDB files and restarts qmail. For me this is the most robust and affordable solution, without getting into any trouble of patching vpopmail and chasing developers on qmailadmin mailing list. The script can be found further below, and is titled update-qmail.sh.		I have created a script which runs every minute and sees if there are any changes in the CDB. If there are, it re-creates CDB files and restarts qmail. For me this is the most robust and affordable solution, without getting into any trouble of patching vpopmail and chasing developers on qmailadmin mailing list. The script can be found further below, and is titled update-qmail.sh.

Kamran: /* Valid RCPT TO */

Kamran — Wed, 10 Apr 2013 08:21:29 GMT

Valid RCPT TO

← Older revision		Revision as of 08:21, 10 April 2013
Line 3,733:		Line 3,733:
	This is already included in qmail, you just need to enable it in the qmail-smtpd/run script.		This is already included in qmail, you just need to enable it in the qmail-smtpd/run script.

-	==Valid RCPT TO==	+	==Valid RCPT To==
-	Valid RCPT TO is part of the JMS combined patch. In order to enable it, you need a CDB file of all the email accounts on your system. This CDB file can be created using the mkvalidrcptto script from the JMS website.	+	Valid RCPT To is an excellent tool in fighting against email floods and deny of service attacks. Normally a mail server receives / accepts mails from anyone, for the domains it is hosting. However it is often the case that it receives emails for email accounts which do not exist in the system even if the domain exists. Te email server then generate a bounce email and tries to send it to the sender, informing that the email server does not exist. This is a waste of system resources. Why receive emails for email accounts which do not exist on our server in the first place. Valid RCPT To patch protects against such abuse.
		+
		+	Valid RCPT To is part of the JMS combined patch. In order to enable it, you need a CDB file of all the email accounts on your system. This CDB file can be created using the mkvalidrcptto script from the JMS website.

	<pre>		<pre>
Line 3,783:		Line 3,785:
	</pre>		</pre>

-	Note: You must re-create the CDB file ~~(manually)~~ as soon as you create or remove a user from any of the domains managed on this system.	+	Note: You must re-create the CDB file, and restart qmail to reload the new CDB, as soon as you create or remove a user (including mailing lists) from any of the domains managed on this system.

-	To create ~~a new~~ CDB ~~every hour, schedule it~~ to ~~run on hourly basis~~.	+	Ideally there should be some sort of "onchange" trigger, which could re-create the CDB file and restart qmail to load new CDB. vpopmail provides such a functionality, but is kind of useless, because qmail, which we use qmailadmin most of the time for user accounts creation, does not work well with this functionality.
-	~~<pre>~~	+
-	~~# crontab -e~~	+
-	~~...~~	+
-	* /1 * * mkvalidrcptto -c /var/qmail~~/control/validrcptto~~.~~cdb~~	+
-	~~</pre>~~	+

		+	I have created a script which runs every minute and sees if there are any changes in the CDB. If there are, it re-creates CDB files and restarts qmail. For me this is the most robust and affordable solution, without getting into any trouble of patching vpopmail and chasing developers on qmailadmin mailing list. The script can be found further below, and is titled update-qmail.sh.

	Enable the VALIDRCPTTO options in the qmail-smtpd/run file:		Enable the VALIDRCPTTO options in the qmail-smtpd/run file:

Kamran: /* RBL SMTPD */

Kamran — Wed, 10 Apr 2013 08:05:25 GMT

RBL SMTPD

← Older revision		Revision as of 08:05, 10 April 2013
Line 3,731:		Line 3,731:

	==RBL SMTPD==		==RBL SMTPD==
-	This is already included in qmail, you just need to enable it.	+	This is already included in qmail, you just need to enable it in the qmail-smtpd/run script.

	==Valid RCPT TO==		==Valid RCPT TO==

Kamran: /* ClamAV Antivirus */

Kamran — Wed, 10 Apr 2013 07:36:22 GMT

ClamAV Antivirus

← Older revision		Revision as of 07:36, 10 April 2013
Line 3,470:		Line 3,470:
	* * /2 * /usr/bin/freshclam --quiet		* * /2 * /usr/bin/freshclam --quiet
	</pre>		</pre>
		+
		+	Make sure to edit the /etc/logrotate.d/freshclam and /etc/logrotate.d/clamav files, and update the user (change to qscand).

	==SpamAssassin AntiSpam==		==SpamAssassin AntiSpam==