Topics

16

Kloxo-MR Bugs and Requests / [BUG] Reset Qmail Assign for domains

« on: 2014-02-17, 13:52:03 »

Hello Mustafa,

This is a bug related to 6.5.0.f.

I deleted all domains - except one - after restore.

Thereafter, I executed sh /script/fix-all.

I found that assign was getting created for all those deleted domains. The  sh /script/fix-qmail-assign was creating assign "Reset Qmail Assign for domains". They are somewhere in the system.

I checked in kloxo database that all domains are deleted, although the assign file + cdb gets generated each time.

Can you tel me which file on the harddrive has stored the information on - deleted - domains?

17

Kloxo-MR Technical Helps / [Qmail] Scavange stopps maillog - cron command to activate authentication

« on: 2013-12-31, 09:28:22 »

Hello,

Before the forum got wiped off, I had placed message on scavange deactivating qmail processes.

I found from # qmailctl stat that - for some unknown reasons - authlib/log, send/log and smtp-ssl/log was down, mostlikely after scavange. This affected authentication as well.

Now I have inserted in root crontab to run every five minutes, as root, the following:

svc -u /var/qmail/supervise/authlib/log
svc -u /var/qmail/supervise/send/log
svc -u /var/qmail/supervise/smtp-ssl/log

This works and helps.

18

Kloxo-MR Technical Helps / [HAIWATHA] How to stop Haiwatha troubles!

« on: 2013-12-28, 09:18:24 »

Hello Mustafa,

For some reasons Haiwatha got messy. ALL THE WEBSITES WERE SHOWING HAIWATHA "INSTALLATION SUCCESSFUL" PAGE.

So I issued:

# service httpd start

Response:

[root@domain ~]# service httpd start
httpd start (98) Address already in use: make_sock: could not bind to address   [::]:80
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:80 no listening sockets available, shutting down Unable to open logs [FAILED]

I did:

# sudo netstat -ltnp | grep ':80'

It gave:

tcp     0     0 0.0.0.0:80     0.0.0.0:*     LISTEN     1187/hiawatha

Then:

# kill 1187

Then:

#service httpd start

Only then httpd started. /script/restart-all gave - ofcourse - the same result because httpd could not bind to port 80, which was occupied by Haiwatha.

It there a way to have Haiwatha under control or not to do this problem?

19

Kloxo-MR Technical Helps / [QMAIL] Stop verbose logging

« on: 2013-12-27, 14:26:45 »

Hello Mustafa,

I found that you have configured verbose logging that generates illegal maillogs pouring sensitive information not allowed by law.

I have a solution to stop this illegal logging by the following change:

/usr/bin/tcpserver -QRH -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD"

I suggest that you incorporate this in all run files.

20

Kloxo-MR Development / [csf] ConfigServer Security & Firewall

« on: 2013-12-27, 14:10:22 »

Hello Mustafa,

Sad to know what happened with the forum and crash...

I found that following would be so fantastic to have it integrated in Kloxo-MR as a builtin package:

http://configserver.com/cp/csf.html

In particular, I found the "Port Flood Protection" as one of the MOST IMPORTANT TOOL to block connections EVEN BEFORE THE SPAMDYKE plays its role.

I have configured as follows:

PORTFLOOD = 22;tcp;1;60,25;tcp;3;60,80;tcp;10;60

---> 25;tcp;3;60

which means that the csf (firewall) shall allow within 60 sec. ONLY THREE CONNECTIONS from a particular IP on Port 25.

Spamdyke will not even be activated for processing as csf blocks the connection activity so beautifully.

Since many days, I see port flooding on 25 port. Hence, this solution is a must.

Kloxo-MR comes must later. In the sequence, CSF ---> spamdyke ---> Qmail/Kloxo-MR.