popa3d-vname, allowing hierarchies for "domain:directory" in vnamemap

Hi all,

I am using hhg's patch at

   http://hhg.to/popa3d/popa3d-0.6.3-vname-2.diff

but it doesn't seem to support directory hierarchies for
directory values in vnamemap. e.g.

   "mydomain.com:mydomain"

works, but

   "mydomain.com:anotherdir/mydomain"

won't.

I wrote the attached patch to allow the above to happen,
but is this safe?

Note that the patch can be applied to unpatched 1.0.2
and result in compilable virtual.c, but only makes
sense when popa3d-0.6.3-vname-2.diff is also applied.

- Andy

============================
http://webmechs.com/webpress
The Webmechs Webpress Blog

popa3d in Minix3

Good day!
I have patch for run popa3d-1.0.2 on Minix3.
I test basic functionality of popa3d in Minix3 and want add this patch
in mainstream. How I can make this?
Thanks.

diff -cr ./popa3d-1.0.2.orig/Makefile ./popa3d-1.0.2/Makefile
*** ./popa3d-1.0.2.orig/Makefile	Thu Aug 19 10:31:06 2010
--- ./popa3d-1.0.2/Makefile	Thu Aug 19 10:40:02 2010
***************
*** 1,12 ****
! CC = gcc
  LD = $(CC)
  RM = rm -f
  MKDIR = mkdir -p
  INSTALL = install -c
! CFLAGS = -Wall -O2 -fomit-frame-pointer
  # You may use OpenSSL's MD5 routines instead of the ones supplied here
  #CFLAGS += -DHAVE_OPENSSL
! LDFLAGS = -s
  LIBS =
  # Linux with glibc, FreeBSD, NetBSD
  #LIBS += -lcrypt
--- 1,13 ----
! CC = cc
  LD = $(CC)
  RM = rm -f
  MKDIR = mkdir -p
  INSTALL = install -c

popa3d log facility

Helo lists,

Is there any possiblity to change popa3d log from /var/log/messages to
/var/log/mail* ?  Which files (*.c, *.h) I should modify??

Authentication Failure

Hi,

I'm running Fedora Core 8 (upgraded using yum from FC5.)  The problem I'm having crept in through the upgrade
process to FC8.  popa3d was running fine on FC5 until this upgrade.  The system has several mailboxes, all of
which are now having authentication failures on login attempts with the following output:

+OK
user joshlarocque
+OK
pass xxxxxxxx
-ERR Authentication failed (bad password?)

With the following error in the logs:

Jan 19 11:44:03 phpexperts xinetd[23682]: START: pop3 pid=7679 from=::ffff:99.242.74.167
Jan 19 11:44:06 phpexperts popa3d[7679]: Authentication failed for joshlarocque from 99.242.74.167
Jan 19 11:44:06 phpexperts xinetd[23682]: EXIT: pop3 status=0 pid=7679 duration=3(sec)

I am, however, able to log into the system as this user and can access the mailbox with the 'mail' command.

The mail directory and mailbox have the following permissions:

drwxrwxr-x 2 root         mail      4096 Jan 19 11:45 /var/spool/mail
-rw------- 1 joshlarocque mail 656253515 Jan 19 11:47 /var/spool/mail/joshlarocque

After reading the existing threads on this list, I tried emptying the mail box using '>
/var/spool/mail/joshlarocque', but I get the same error.

Any help would be greatly appreciated.  Is there some possible authentication disconnect between popa3d
and the system?  What other packages could I focus on troubleshooting to resolve this issue?

user restrictions

Is there a way to assign an IP range (10.0.0.0/8) as internal and allow all users to connect from those
addresses and then to limit which users are able to POP from outside IP addresses?

What we are trying to do is only let certain users access their accounts via pop from outside our network but
they all need to access from inside.  It seems like it should be simple to add it in but I wanted to check to see
if someone has already come up with it.

Thanks and happy holidays,

-------
Steve Bailey
Hardware / Networking Specialist
Atlantic Automotive | MileONE Automotive
sbailey@...<mailto:sbailey@...>
Mile One, 23 Walker Avenue, Baltimore, MD 21208
http://www.mileone.com<blocked::http://www.mileone.com/>

rate limiting popa3d

Dear all,

Lately, our popa3d based pop server suffers from people checking their
mail every 5 seconds. 
Is there a way to rate limit pop checking (based on username / time
period for example) with popa3d or should I use a proxy pop3 server for
this?
If someone has a patch for this, that would be very helpful.  

Cheers,

Wouter Callewaert

denying certain system users from checking for mail

Is there a way with popa3d to do like a deny.users list or
something?  I'm just looking for a way to tighten down
the system, to keep the script kiddies and such from
even getting to an authentication stage in the mail check,
for example when they use the news user, root user, etc.

I want the username to have to be a valid user of the
system, i.e. mail-retrieving user, before it will get
to the authentication stage.

TLD

popa3d and virtual domains

Hi,

As far as I can determine, popa3d (patched with the vname patch) will
support local virtual domains (i.e.  domain:<path>).  Is there a patch
out there that can support external paths?
(i.e. domain:<server>:<port>)?   So instead of popa3d retrieving
mail from a local virtual server,  it goes for another pop server
(by relaying commands coming from and contents going to the
client).

Any clarifications appreciated.

Ed

patch: discarding domain if no virtual domains

Hi,

I'm moving from shared web-hosting to VPS where I'm setting up popa3d.
I want to make the move as seamless for mail users as possible.
The shared hosting uses cPanel software with builtin POP3 server,
there full email address serves as POP3 login, there is also a note:

| If your e-mail client has trouble using a @ sign in the login,
| you can use +, :, or % sign instead.

The users have different localparts of POPable mailboxes, so I needn't
virtual domains in popa3d. It's more convenient without virtual domains
because of the KISS principle and because users can change their passwords
if I specify /usr/bin/passwd as login shell. I want users to be able
to continie to use full email addresses as POP3 logins,
popa3d to just ignore domains in logins and to use localpart as the username.
I wrote and tested a patch http://lena.kiev.ua/popa3d-1.0.2-nonvirtual.diff
It seems to work OK. I also include the same patch below.

Lena

-----

*** pop_auth.c.old	Mon Sep  9 14:07:48 2002
--- pop_auth.c	Thu Apr 10 00:16:05 2008
***************
*** 6,11 ****
--- 6,12 ----
  #include <unistd.h>
  #include <string.h>

Failed or refused to load /var/spool/mail/xxxx

Hello guys,

I'm trying to use the popa3d after some years without work with
mailservers (I was working just with webservers on ISP provider).

I'm using the popa3d-1.0.2-1mdv2007.0 package, the server is UP and
listen on 110/tcp port, the postfix it's working and delivering
messages on /var/spool/mail/user as well.

This is the problem:

$ telnet localhost 110
Trying 127.0.0.1...
Connected to orochimaru (127.0.0.1).
Escape character is '^]'.
+OK
user tiagocruz
+OK
pass 123456
-ERR
Connection closed by foreign host.

And this is the error on log:

Jul 18 00:17:36 orochimaru popa3d[12995]: Authentication passed for
tiagocruz -- [127.0.0.1]
Jul 18 00:17:36 orochimaru popa3d[12995]: Failed or refused to load
/var/spool/mail/tiagocruz

I don't have Idea of how can I solve this problem... someone can help me?

cannot get this to work

Hello everyone I am going to just start off and say I am rather new to linux 
and this is truly my last resort. I have looked everywhere and tried quite a 
bit before asking for help and I appreciate any that you all can provide.

I have been trying for a couple days now to successfully setup this popa3d 
server to receive emails. I am using the basic out of the box openwall 
configurations and I have modified the postfix main.cf file the best I can 
and created a test user. I am able to locally connect and do a STAT w/ no 
problem. I dont know if this is a routing issue or a configuration within 
the postfix config files or not.

I have set my router to forward the traffic on port 110 that comes in on my 
dynamic dns that is managed by my router to the pop server. I have forwarded 
both udp and tcp traffic through iptables.

iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 110 -j DNAT --to 
192.168.1.153
iptables          -A forwarding_rule -i $WAN -p tcp --dport 110 -d 
192.168.1.153 -j ACCEPT

and I repeated the above for udp.

I checked my apache server and verified that it is working fine and 
forwarding to another machine successfully. By connecting with a non-local 
ip. However we cannot connect to the pop server via telnet or mail2web on 
that external ip. No traffic showed up heading to port 110 either when I 
looked for traffic on port 110 with wireshark locally.

Again thanks to anyone who can point me in the right direction. If there are 
any resources you all could recommend for me I would appreciate that as