Branches
Articles referencing this project
Comments
[»]
XQMAgent install on FreeBSD-6.1-Release (XMail)
by sonarru - Aug 28th 2006 23:15:42
Hi there,
I am trying to install XQMAgent (GUI for XMail server) on
FreeBSD-6.1-Release. After unzip and try to run script "./xqmagent" to
install this package, I get a message "/usr/libexec/ld-elf.so.1: Shared
object "libz.so.2" not found, required by "xqmagent"." On
http://marketmix.com/, where I downloaded XQMAgent, it is said that before
installation "please be sure that libssl.so.0.9.6 (Secure Sockets Layer,
cryptography libraries and tools) is installed on your system,” and gives
this link http://www.freebsd.org/cgi/ports.cg...nssl&stype=name. I
installed openssl from ports, but it doesn't make any difference. I just
don't know where to get this library.
Thank you for your advice ahead!
Alex
[reply]
[top]
[»]
multiple domains on one IP
by rg - Nov 2nd 2005 18:13:06
Hi,
I am trying to setup several different domains on one Xmail server all
with the same IP address.
It has been having problems with relay and seems to come of an invalid PTR
record. There is only one PTR record to the root domain, but many other
emails get bounced back from the rest of the domains.
How should I be setting it up?
Thanks a lot.
[reply]
[top]
[»]
Windows XP configuration
by Derge - Jun 29th 2005 20:26:18
I would appreciate any help on this issue - I have installed XMail on my
Win XP Pro laptop, following all instructions from Halfdone.com
(http://www.halfdone.com/Articles/XMailInstall/) - a very good tutorial if
I say so myself, and I do. :)
I am trying to set up my own machine at from my laptop to send e-mail
using XMail; thus while following the instructions at halfdone.com I
replaced the domain names provided in the tutorial with 'localhost'. This
is the only way I could think of to send e-mail from my machine.
Using this configuration, however, my e-mail client connects to localhost,
and asks for my password. The password I used in the installation of XMail
seems to not be acceptable, and I am asked again and again for my
password.
I am thinking that there is something I did wrong in my configuration. The
totorial at halfdone.com is for XMail 1.6 & 1.7. Could that be it?
Well, in any case, I have not found any instructions on how to send e-mail
via XMail using your own machine, it seems like it's just for servers
connected to the Internet backbone, or have a DNS server running on it, or
something. I found many different non-XMail related GUI apps out there that
would do the trick, but they're resource hogs.
Any help on this topic would be appreciated!
serge@oraange.ca
Derge
[reply]
[top]
[»]
Re: Windows XP configuration
by david - Jul 7th 2005 10:00:40
Are you trying to send mail (SMTP) or get mail (POP3), while getting the
password retry?
How did you configure your server? Manually, or using the CtrlClnt tool?
[reply]
[top]
[»]
PSYNC Configuration
by Aseem - May 27th 2004 02:13:43
Hi - I have configured my local domain accounts to be synched with my
external domain accounts. During synchronization the mail is downloaded to
the local server & deleted from the external server. How can I
configure PSYNC to leave a copy of the mails behind on the external server
& not delete them ?
[reply]
[top]
[»]
Re: PSYNC Configuration
by david - May 29th 2004 15:43:22
In version 2.0 (still in development) the IMAP fetcher already support such
feature. Version 2.0 will also support UIDL based POP3 fetch-only-recent
feature. I am still not not if it is the case to backport the thing from
2.0 to 1.x.
[reply]
[top]
[»]
Re: PSYNC Configuration
by Aseem - May 30th 2004 23:32:29
Hi David - Thanks for the response, so I guess I'll have to wait for the
2.0 release to be able to use this feature.
Nonetheless congratulations on coming up with a wonderfully stable and
efficient system, specially given the small footprint of the server.
Although I havent deployed XMail in a production environment, its
performance in the test environment has come out very good indeed !
[reply]
[top]
[»]
Problem in setting up XMail Server
by navin - Mar 22nd 2005 21:04:09
Hi..i am unable to setup XMail Server. Can anyone help me out in doing the
same.
here are the steps followed by me.., still its not working.....
Followed the steps given in README, created registery entries as described
in th README, Installed XMAil Service (auto).Xmail Service is running in my
Services.....
my systemname:pluto,
domain:test.com
my "server.tab" entries are:---
"RootDomain" "pluto.test.com" ,
"SmtpServerDomain" "mail.pluto.test.com" ,
"POP3Domain" "mail.pluto.test.com" ,
"HeloDomain" "mail.pluto.test.com" ,
"PostMaster" "postmaster@pluto.test.com" ,
"ErrorsAdmin" "postmaster@pluto.test.com" ,
Using XMail Admin GUI, i created
servername :localhost
serveraddress:127.0.0.1, port:6017
domain:pluto.test.com,
under this created users:
test1 and test2,
after this started the XmailServer and Using Mailclient(Outlook and
Mozzila) i tried configung these users, by giving Pop3 and SMTP server as
: "pluto.test.com"
after all this i am not able to send mail from one user to other...
What might be the problem??
is my configuration is right?? or anything wrong in my setup??
Please Help me....
thanks in advance.....
navi
[reply]
[top]
[»]
Very stable
by Sergio - Apr 13th 2004 23:18:02
i´ve been using this mail server based on a 486mhz-32mb_ram (under
Win2K Server, YES..) with 200 days of uptime. Really a great program.
BUT, i got a complaint: please, improve the logging format. Is not clear
at all. I want to know if my mail are finally delivered, checking an easy
log. Sometimes i just choose another mailservers just because that
*problem* (or because i like a feature that xmail doesn´t have it:
ability to reemplace strings in mail headers. it is useful to stealth some
info that i don´t want to give to the world. this can be another
suggestion for future realeases, but it is not so important, i know).
[reply]
[top]
[»]
Re: Very stable
by david - Apr 14th 2004 14:36:41
Changing the log format is something not feasible since there are thousands
of users that are parsing it in the current format. Did you check log
parsing tools available on the XMail home page?
[reply]
[top]
[»]
Remote Administration
by mykD - Jun 1st 2003 10:47:21
I've in search of a good email server package that included POP3, SMTP,
mailing lists, and an easy way to plug in a web email interface for
account creation and so on. Xmaill from everything I've read so far does
all I want it to do :). I am having one problem that I hope to get so help
with.
I have everything installed and working properly except the remote
administration. For some reason I can't get logged into the remote admin
part at all. I've tried the the CtrlClnt, write a PHP script to attempt to
log in, and tried via telnet and none of it seems to work.
I've created a ctrl account in the ctrlaccounts.tab file. As of right
now it has 1 line:
"user"[tab]"password"[CR][LF]
Of course user is the user name I'm using and password is the password
encrypted with XMCrypt.
I've tried many different ways of getting logged in from sending just a
plain text password to encrypting the time stamp string attaching the
encrypted password to that and so. Even trying to access the remote admin
stuff with CtrlClnt doesn't seem to work.
I'm at a complete loss here.
BTW: It's running on a very customized install of mandrake 9.
Need Help,
mykD
[reply]
[top]
[»]
Re: Remote Administration
by david - Jun 8th 2003 09:59:11
I believe we already solved this by email.
[reply]
[top]
[»]
Error while sending local mail
by Alex R - May 27th 2003 07:52:27
XMail doesn't deliver mail for local users (or may be I did any errors
while configuring XMail?) When I send message to adress root@mydomain.org
- everithing OK, but when I try to send message to root from command
string (e.g.: "echo aaa | mail root") - server doesn't deliver
this message.
OS: FreeBSD
XMail 1.15
my server.tab file 1st string:
"RootDomain" "mydomain.org"
[reply]
[top]
[»]
Re: Error while sending local mail
by david - May 27th 2003 22:03:33
XMail does not support the mail command, that uses the legacy Unix mail
storage. You can use XMail's sendmail to do that, and it is included
inside the tarbal. To install it, supposing you have
MAIL_ROOT=/Var/MailRoot, you have to do something like :
# mv /usr/sbin/sendmail /usr/sbin/sendmail.orig
# cp sendmail /usr/sbin/sendmail.xmail
# chmod +s /usr/sbin/sendmail.xmail
# cp sendmail.sh /usr/sbin/sendmail
If you have XMail installed in another path, you have to edit the
sendmail.sh file.
[reply]
[top]
[»]
SMTP server connection time out
by Nick.net - Mar 29th 2003 22:46:32
I have tried to read through the manual serveral times,but I still can't
connect my SMTP server remotely,buy I can connect my POP3 server.
It is so strange.
My platform is Win2000,
~~~~HELP!
[reply]
[top]
[»]
Re: SMTP server connection time out
by david - Mar 30th 2003 12:48:22
Did you try doing a telnet to port 25 from the same XMail machine ?
[reply]
[top]
[»]
Re: SMTP server connection time out
by Nick.net - Mar 30th 2003 15:52:08
Yes .
I can telnet to port 25 from my machine
[reply]
[top]
[»]
Re: SMTP server connection time out
by david - Mar 31st 2003 17:38:51
You might want to check your firewall, if you are going through one. Is a
telnet to port 25 from another machine in the same netwrok running fine ?
[reply]
[top]
[»]
Using as relay to internal servers
by Todd - Mar 19th 2003 12:02:33
Hi - I am attempting to configure Xmail so that it forwards all mail for
specific domains to specific Exchange Servers. I got that part working by
editing the smtpfwd.tab. My problem is this; I cannot get it to accept
email from the outside after I edit smtprelay.tab to allow only my IP
addresses to relay. What do I need to do so it accepts for my specific
domains from any mail servers on the Internet, but will not relay to
others?
[reply]
[top]
[»]
Re: Using as relay to internal servers
by david - Mar 19th 2003 20:08:46
You should use custom domains for that purpose.
[reply]
[top]
[»]
SMTP Authentication
by alfvicente - Mar 4th 2003 05:47:33
Hi there.
I'm using the 1.11 version and it's working very well, but I have a
problem and don't know where to ask for help.
My ISP provider has it's own mail server (say, abc.com), and it
uses authentication to send through his SMTP.
I know that using Xmail don't need an external SMTP server to send my
e-mails, but if I try to send a mail to anyone that have an account at
abc.com using my SMTP, the other side (ISP's server) understands
that I'm a user of that server and don't let me to sen that email.
(UFFF!!!)
Resuming: if I send an email to a user that is on my ISP's server, It gets
rejected with an error like 'you need auth to send an email'.
And what I need is someone to tell me something: if I add the line
'DefaultSMTPGateway' in the server.tab, how can I authenticate on that
server to be able to use it as an user of that server?
Well, I hope someone understands me... Alf
[reply]
[top]
[»]
Re: SMTP Authentication
by david - Mar 4th 2003 14:23:53
Try to look inside the documentation for "SMTP CLIENT AUTHENTICATION".
[reply]
[top]
[»]
connecting to POP3 server remotely
by Pete79 - Nov 25th 2002 16:25:42
I have installed the xmail binary on a linux box, set up users, domain,
userauthentication. Everything works great except remotely connecting to
the POP3 server.
locally on the machine xmail is installed on, I am able to set up an email
client and connect and retrieve mail from the POP3 server, as well as
locally telnet into the POP3 server. However, remotely on any other
machine I am not able to connect to the POP3 server at all. which is
strange because it works fine locally.
The SMTP server works fine locally and remotely, just not the POP3
This is a pretty cool product and I'd like to get it up and running, and
can't seem to figure this one out, does anybody have any info on this
scenario?
[reply]
[top]
[»]
Re: connecting to POP3 server remotely
by david - Dec 1st 2002 15:36:29
> I have installed the xmail binary on a
> linux box, set up users, domain,
> userauthentication. Everything works
> great except remotely connecting to the
> POP3 server.
>
> locally on the machine xmail is
> installed on, I am able to set up an
> email client and connect and retrieve
> mail from the POP3 server, as well as
> locally telnet into the POP3 server.
> However, remotely on any other machine I
> am not able to connect to the POP3
> server at all. which is strange because
> it works fine locally.
>
> The SMTP server works fine locally and
> remotely, just not the POP3
>
> This is a pretty cool product and I'd
> like to get it up and running, and can't
> seem to figure this one out, does
> anybody have any info on this scenario?
Are you sure you're using the full email address as POP3 username ?
[reply]
[top]
[»]
Re: connecting to POP3 server remotely
by alfvicente - Mar 4th 2003 05:50:16
> I have installed the xmail binary on a
> linux box, set up users, domain,
> userauthentication. Everything works
> great except remotely connecting to the
> POP3 server.
>
> locally on the machine xmail is
> installed on, I am able to set up an
> email client and connect and retrieve
> mail from the POP3 server, as well as
> locally telnet into the POP3 server.
> However, remotely on any other machine I
> am not able to connect to the POP3
> server at all. which is strange because
> it works fine locally.
>
> The SMTP server works fine locally and
> remotely, just not the POP3
>
> This is a pretty cool product and I'd
> like to get it up and running, and can't
> seem to figure this one out, does
> anybody have any info on this scenario?
Are you sure that you don't have any firewall running? I had the same
problem and that was all the problem (and I'm using a binary too)
[reply]
[top]
[»]
Installing Xmail
by Adrian - Nov 9th 2002 08:53:37
Freshmeat/XMAIL Newbie
I have downloaded the Binaries (zip) for Xmail for WIN2000 (server) and
followed the instructions (which all appear to be written for user
compiles) When I attempt to start Xmail it tells me to set up a variable,
which I do!
I can see Xmail place files in it's folder, but as soon as I OK the error
it removes them again.
I have not set up the registry entries as I assume that the installation
program will do this - is this my error?
What am I doing wrong?
--
Kind Regards
Adrian
[reply]
[top]
[»]
Re: Installing Xmail
by david - Nov 9th 2002 19:08:39
> Freshmeat/XMAIL Newbie
> I have downloaded the Binaries (zip) for
> Xmail for WIN2000 (server) and followed
> the instructions (which all appear to be
> written for user compiles) When I
> attempt to start Xmail it tells me to
> set up a variable, which I do!
>
> I can see Xmail place files in it's
> folder, but as soon as I OK the error it
> removes them again.
>
> I have not set up the registry entries
> as I assume that the installation
> program will do this - is this my
> error?
>
> What am I doing wrong?
Yes, you have to setup the registry like the configuration section of the
documentation tells you :
http://www.xmailserver.org/Readme.html#nt/win2k
You will obviously skip 1) because you already have the binaries.
[reply]
[top]
[»]
Re: Installing Xmail
by Adrian - Nov 10th 2002 15:35:55
Hi David,
Thanks, this looks much better - I'll try this tomorrow (Monday) - this is
clear and concise!
The instructions that I had before were written in bad English and were
ambiguous! (In blue, courier font, can't find them from this machine!)
--
Kind Regards
Adrian
[reply]
[top]
[»]
Re: Installing Xmail
by david - Nov 27th 2002 08:58:31
> Freshmeat/XMAIL Newbie
> I have downloaded the Binaries (zip) for
> Xmail for WIN2000 (server) and followed
> the instructions (which all appear to be
> written for user compiles) When I
> attempt to start Xmail it tells me to
> set up a variable, which I do!
>
> I can see Xmail place files in it's
> folder, but as soon as I OK the error it
> removes them again.
>
> I have not set up the registry entries
> as I assume that the installation
> program will do this - is this my
> error?
>
> What am I doing wrong?
Did you use the full email address as POP3 username ?
[reply]
[top]
[»]
Fax and Voice
by SuperKev - May 26th 2002 22:35:23
Does anyone know of any projects/products to add fax and/or voice
capabilities to XMail ?
By fax I mean allowing fax creation and forwarding to XMail by printing,
with XMail then handing the faxmodem.
By voice I mean people being able to call in to a voicemodem and leave
messages which are then given to XMail for delivery as emails.
I did a bit of searching around but cuoldn't find anything.
Failing that, if anyone knows any good (and preferably free)
modem/fax/voice libraries and tells me, then I might even construct
something myself and give it to the project.
SK:-)
[reply]
[top]
[»]
Re: Fax and Voice
by david - Jun 2nd 2002 14:20:35
>
> Does anyone know of any
> projects/products to add fax and/or
> voice capabilities to XMail ?
>
> By fax I mean allowing fax creation
> and forwarding to XMail by printing,
> with XMail then handing the faxmodem.
>
> By voice I mean people being able to
> call in to a voicemodem and leave
> messages which are then given to XMail
> for delivery as emails.
>
> I did a bit of searching around but
> cuoldn't find anything.
>
> Failing that, if anyone knows any good
> (and preferably free) modem/fax/voice
> libraries and tells me, then I might
> even construct something myself and give
> it to the project.
XMail has the capability, through mailproc.tab external commands, to call
external programs on message receival. So it's only a matter of calling
the right program/script to add fax & voice capabilities.
[reply]
[top]
[»]
Is the Best email Server !!!
by Omar - May 23rd 2002 14:27:44
I'm using Xmail many time ago, and it works Hard. I'm Using Win2000
Workstation running as service.
I have used source code parts for cgis applications. I feel that I have
all the control.
Thanks David
--
OmarAguiarVenezuela
[reply]
[top]
[»]
it rocks
by billythekid - Feb 6th 2002 20:44:23
i'm using it starting from 1.0 and i've never had a single problem. It
handles my traffic of about 20000-30000 messages / day ( ~25000 accounts ,
~500 domains ) smootly like water on a PIII 600 MHz with 256Mb of RAM and
ide-raid disks. It's feature rich and highly configurable to run external
programs and filter scripts. One thing i'm missing is a web administration
interface for apache+php
[reply]
[top]
[»]
Not a safe package to use
by geeklawyer - Feb 6th 2002 04:14:28
My brother used this software and came to regret it greatly. It works well
except in two important respects:
1) it permits relaying by default and the documentation is rather poor so
it was never obvious how to change it.
2) there is NO functional logging capability, though it claims to
have it, so you never know what your server is doing. result?
Spammers found his xmail server & that it relayed. He knew nothing of this
till he got abuse complaints from ISPs. He never noticed his network
traffic was through the roof 'cos he runs a counter-strike games server.
He had no logs to check. So it all slipped under the radar. He is now on
RBL.
Thanks xmail.
In other respects it worked well but 'till they fix those issues dont
touch it.
[reply]
[top]
[»]
Re: Not a safe package to use
by david - Feb 6th 2002 14:34:42
> My brother used this software and came
> to regret it greatly. It works well
> except in two important respects:
> 1) it permits relaying by default and
> the documentation is rather poor so it
> was never obvious how to change it.
> 2) there is NO functional logging
> capability, though it claims to have it,
> so you never know what your server is
> doing. result?
> Spammers found his xmail server & that
> it relayed. He knew nothing of this till
> he got abuse complaints from ISPs. He
> never noticed his network traffic was
> through the roof 'cos he runs a
> counter-strike games server. He had no
> logs to check. So it all slipped under
> the radar. He is now on RBL.
> Thanks xmail.
> In other respects it worked well but
> 'till they fix those issues dont touch
> it.
1) the configuration section of the documentation is very clear about ( as
the last step ) restricting relaying and it's a matter of editing a text
file. Even users with 0.0 experience have been able to configure it
correctly.
2) you've to enable logging manually and after that XMail has one of the
more verbose logs among MTAs. It has separate logs for SMTP ( incoming ),
POP3, SMAIL ( mail delivery ) and CTRL ( control protocol )
A simple read of the 25 lines configuration section would have solved the
problem completely.
[reply]
[top]
[»]
Re: Not a safe package to use
by geeklawyer - Feb 6th 2002 17:29:44
You appear to concede my point - why is it necessary to edit a configuation
file to get default safe behaviour? it should be necessary to edit config
files to get *unsafe* behaviour not safe behaviour. For example Postfix is
safe 'out of the box' .
ditto the logging.
its a nice package and it handles default domains way better than Postfix
but it is not yet industrial strength.
And I should mention that the Saint vulnerability scanner reports is as
having vulnerabilities.
call me when xmail v2 is ready.
1) the configuration section of the
documentation is very clear about ( as
the last step ) restricting relaying and
it's a matter of editing a text file.
Even users with 0.0 experience have been
able to configure it correctly.
2) you've to enable logging manually
and after that XMail has one of the more
verbose logs among MTAs. It has separate
logs for SMTP ( incoming ), POP3, SMAIL
( mail delivery ) and CTRL ( control
protocol )
A simple read of the 25 lines
configuration section would have solved
the problem completely.
[reply]
[top]
[»]
Re: Not a safe package to use
by david - Feb 6th 2002 17:47:39
> You appear to concede my point - why is
> it necessary to edit a configuation file
> to get default safe behaviour? it should
> be necessary to edit config files to get
> *unsafe* behaviour not safe behaviour.
> For example Postfix is safe 'out of the
> box' .
> ditto the logging.
> its a nice package and it handles
> default domains way better than Postfix
> but it is not yet industrial strength.
> And I should mention that the Saint
> vulnerability scanner reports is as
> having vulnerabilities.
> call me when xmail v2 is ready.
>
>
The reason of having it open is that 99% of MTA users know about open
relaying and configure their MTA correctly. 90% of unexperienced users are
the ones that run XMail inside a DMZ and want open relay by default. The
security hole the scanners like nessus and saint reports is false and
bogus. It's a security feature indeed and get triggered when SMTP clients
try to send commands that does not respect RFCs ( like looong lines or
binary data inside hte command ). In this case XMail does not even try to
be pretty and closes the connection immediately. Scanners then think that
the server crashed while it's still happily running by correctly and
promply servicing real users.
[reply]
[top]
[»]
Re: Not a safe package to use
by david - Feb 6th 2002 18:06:33
> You appear to concede my point - why is
> it necessary to edit a configuation file
> to get default safe behaviour? it should
> be necessary to edit config files to get
> *unsafe* behaviour not safe behaviour.
> For example Postfix is safe 'out of the
> box' .
> ditto the logging.
> its a nice package and it handles
> default domains way better than Postfix
> but it is not yet industrial strength.
> And I should mention that the Saint
> vulnerability scanner reports is as
> having vulnerabilities.
> call me when xmail v2 is ready.
>
Talking a bit more about security, XMail has a stack pointer jittering at
each thread creation that makes it almost impossible ( in very remote
cases of overflowing ) to guess the stack pointer to inject malicious
code. Talking about performance ( static relaying ) on my dual PIII 1GHz
with 256Mb RAM and dual eth ( all servers configured with log disabled and
for static relaying ) running RH6.2 with 2.4.2 ( test has been ran 08/2001
) :
XMail ~= 140000 messages / hour
qmail ~= 90000 messages / hour
exim ~= 82000 messages / hour
postfix ~= 78000 messages / hour
sendmail ~= 70000 messages / hour
[reply]
[top]
[»]
Re: Not a safe package to use
by Thomas - Apr 15th 2004 10:15:14
Hi, isn't there an option to customize the SMTP greeting message? Also I
think the delivery notifications (on failure) are very cryptic and hard to
read/understand for a "standard", non-tech user.
But maybe I'm only spoiled by S*n's iPlanet Msg. Server, which we have
used by now ;) At least I can tell that XMAIL is able to handle 1m
incoming mails per day, even if the message queue is hard to manage (using
XQM)
[reply]
[top]
[»]
Re: Not a safe package to use
by Travis Gerspacher - Feb 6th 2002 23:09:06
>
> % My brother used this software and
> came
> % to regret it greatly. It works
> well
> % except in two important respects:
>
> % 1) it permits relaying by default
> and
> % the documentation is rather poor so
> it
> % was never obvious how to change it.
>
> % 2) there is NO functional logging
> % capability, though it claims to have
> it,
> % so you never know what your server
> is
> % doing. result?
> % Spammers found his xmail server &
> that
> % it relayed. He knew nothing of this
> till
> % he got abuse complaints from ISPs.
> He
> % never noticed his network traffic
> was
> % through the roof 'cos he runs a
> % counter-strike games server. He had
> no
> % logs to check. So it all slipped
> under
> % the radar. He is now on RBL.
> % Thanks xmail.
> % In other respects it worked well
> but
> % 'till they fix those issues dont
> touch
> % it.
>
>
> 1) the configuration section of the
> documentation is very clear about ( as
> the last step ) restricting relaying and
> it's a matter of editing a text file.
> Even users with 0.0 experience have been
> able to configure it correctly.
>
> 2) you've to enable logging manually
> and after that XMail has one of the more
> verbose logs among MTAs. It has separate
> logs for SMTP ( incoming ), POP3, SMAIL
> ( mail delivery ) and CTRL ( control
> protocol )
>
> A simple read of the 25 lines
> configuration section would have solved
> the problem completely.
>
>
I would have to agree that these things should be set as the default, but
more importantly, why was this person running a mail server without
editing the configuration file. Something like this should not even be
started without checking and editing the configuration and absolutely not
without completely reading and understanding at least the
documentation.
Honestly, I have never used this software, but some things are just common
sense. It was this persons brothers lack of it that got him on the RBL,
not this software.
[reply]
[top]
[»]
Re: Not a safe package to use
by Claus Dahl - Aug 12th 2002 13:09:05
>
> % My brother used this software and
> came
> % to regret it greatly. It works well
> % except in two important respects:
> % 1) it permits relaying by default and
> % the documentation is rather poor so
> it
> % was never obvious how to change it.
> % 2) there is NO functional logging
> % capability, though it claims to have
> it,
> % so you never know what your server is
> % doing. result?
> % Spammers found his xmail server &
> that
> % it relayed. He knew nothing of this
> till
> % he got abuse complaints from ISPs. He
> % never noticed his network traffic was
> % through the roof 'cos he runs a
> % counter-strike games server. He had
> no
> % logs to check. So it all slipped
> under
> % the radar. He is now on RBL.
> % Thanks xmail.
> % In other respects it worked well but
> % 'till they fix those issues dont
> touch
> % it.
>
>
> 1) the configuration section of the
> documentation is very clear about ( as
> the last step ) restricting relaying and
> it's a matter of editing a text file.
> Even users with 0.0 experience have been
> able to configure it correctly.
>
> 2) you've to enable logging manually and
> after that XMail has one of the more
> verbose logs among MTAs. It has separate
> logs for SMTP ( incoming ), POP3, SMAIL
> ( mail delivery ) and CTRL ( control
> protocol )
>
> A simple read of the 25 lines
> configuration section would have solved
> the problem completely.
>
>
I'll have to agree with the user post. The XMail documentation is abysmal
in this regard. What's so difficult about stating explicitly in the
documentation exaclty how the settings for a safe mail server are too
look. An even better iday is to ship with more than one standard
configuration from "No security concerns" to "Completely paranoid"
[reply]
[top]
[»]
Re: Not a safe package to use
by Dennis Beck - Jun 7th 2004 10:03:05
I have to agree. Your condescending and unrealistic response reminds
me of something out of Redmond.
1. Making this package an out of the box spam relay, one wonders about
your design motivation. Are spammers looking for XMAIL installs to exploit
this security failure. I don't think MS would even try to justify this
feature.
2. Which 25 lines are you talking about? If you are going to make such
a bad design decision, it would be better to put a warning and step by
step instructions.
[reply]
[top]
[»]
Re: Not a safe package to use
by buehlertech - Jun 22nd 2004 11:25:21
I couldn't disagree more with either of you. Regardless of the relatively
minor issue of "out of the box" configuration, which is a simple judgment
call that you seem to think is a major issue, I think it's ridiculous to
even consider running a mail server without at least some level of
awareness of security, open relaying being the first and most basic of
security issues for a mail server.
The fact that Davide accounts for potential malicious code injection by
jittering pointers goes WAY past most mail servers efforts at real
security, at least the ones I am familiar with, and he should be applauded
for that, as should Xmail. Instead you gripe about minor judgment calls and
refer to his comments as condescending and reminiscent of Microsoft (hello?
It's FREE, for one thing, and STABLE) - my comments may be a bit
condescending since I can't believe anyone would run an open relay mail
server then blame the product when they get blacklisted, but I don't feel
Davides were in the least.
Anyway, that's my opinion. And there are step by step instructions, as
well as a warning, if you simply go over the documentation. Item 15 in the
step-by-step setup for Linux/UNIX, and item 16 for Windows if you wish to
verify that.
Jeff
[reply]
[top]
[»]
xmail server
by unixgr - Jun 2nd 2000 13:25:32
This is definitely a great mail server, with a lot of features, rock
stable, and as compact to keep up and running a lot of accounts ...
[reply]
[top]
|
