List Info

Thread: KolabFilter Forged Header and :465




KolabFilter Forged Header and :465
user name
2008-02-29 08:50:39
Hi
I hope you guys get this, i registered on here before, altho i found my email in the archive with replies, i never actually received any mails to my inbox, also i never had any reg confirmation = so fingers crossed. Also, i hope this is the right place, and that what i am trying to achieve is valid.
 
Kolab 2.1 on OpenSuse 10.3
 
running the server Nat;d behind a firewall.
 
It all started when i was trying to get Altermime to work for outgoing email. I want to apply a standard disclaimer.... So i followed the instructions in the Wiki. ; http://wiki.kolab.org/index.php/Adding_disclaimer
 
Installed the Altermime, ran from the command line - all ok.
Configured the Master.cf template in Kolab to direct the MTA thro Altermime script.
Works for incoming email but not outgoing! So in effect the altermime script works, its just not being called for the outgoing email.
 
The users have 2 methods of connecting to send/receive email - Horde and Outlook. Outlook (internal and external to the LAN) uses 465  and all that as per the opensuse build detailed in opensuse Wiki. http://en.opensuse.org/Kolab to send email, so obviously the Altermime filter isnt being called. so i added the content filter call to the relevant entry in master.cf template. Now it does appear to call the altermime and appends the disclaimer to the email. But then it is passed to the Kolabfilter which rejects the email as a forged Header because the sendmail function of postfix appears to loose the Authd user info and client address as its passed through.
 
I also looked at this: http://lists.kde.org/?l=kroupware&m=114018629726046&w=2
unfortunately that didnt work either.
Is it possible for me to do what i am trying to achieve with the current solution or do i need to reconfigure a great deal? Because the user is auth'd when it hits the server and they will always have to be to use 465 is there anyway of bypassing the kolabfilter on these emails?
Also will i be able to do the same with Horde, Horde runs on the same box as the Kolab installation, and If i set 127.0.0.1:smtp to call the content filter i think the email wont be delivered? At least it doesnt appear to be, and the logs just say deferred.
 
I also looked at the script used in this solution: http://www.howtoforge.com/add-disclaimers-to-outgoing-emails-with-altermime-postfix-debian-etch
again it didnt work, i wondered if that was something to do with it being for debian?
 
I would appreciate any feedback you can offer on the best way forward, or even if it is possible.
 
Thanks
Nigel
 ;
PS. Lets hope the list works properly with my hotmail address
 


Sounds like? How many syllables? Guess and win prizes with Search Charades!
Re: KolabFilter Forged Header and :465
country flaguser name
Germany
2008-03-11 00:47:19
Hi Nigel,

Nigel Davis <nigel_davishotmail.com> writes:

> Hi
> I hope you guys get this, i registered on here before,
altho i found my email in the archive with replies, i never
actually received any mails to my inbox, also i never had
any
> reg confirmation = so fingers crossed. Also, i hope
this is the right place, and that what i am trying to
achieve is valid.
>  
> Kolab 2.1 on OpenSuse 10.3
>  
> running the server Nat;d behind a firewall.
>  
> It all started when i was trying to get Altermime to
work for outgoing email. I want to apply a standard
disclaimer.... So i followed the instructions in the Wiki. 
http://
> wiki.kolab.org/index.php/Adding_disclaimer
>  
> Installed the Altermime, ran from the command line -
all ok.
> Configured the Master.cf template in Kolab to direct
the MTA thro Altermime script.
> Works for incoming email but not outgoing! So in effect
the altermime script works, its just not being called for
the outgoing email.
>  
> The users have 2 methods of connecting to send/receive
email - Horde and Outlook. Outlook (internal and external to
the LAN) uses 465  and all that as per the opensuse build
> detailed in opensuse Wiki. http://en.opensuse.org/K
olab to send email, so obviously the Altermime filter
isnt being called. so i added the content filter call to the
relevant
> entry in master.cf template. Now it does appear to call
the altermime and appends the disclaimer to the email. But
then it is passed to the Kolabfilter which rejects the email
> as a forged Header because the sendmail function of
postfix appears to loose the Authd user info and client
address as its passed through.

I'm not really certain if I can give you useful advice on
installing
Altermime since I never used this. But I'd expect that you
need to
specify the content filter for the smtpd running on port
465:

465       inet  n       -       n       -       -      
smtpd -o smtpd_tls_wrappermode=yes -o
smtpd_sasl_auth_enable=yes -o content_filter=dfilt:

I'm not entirely certain that this will work though ;)

Cheers,

Gunnar

>  
> I also looked at this: http://lists.kde.org/?l=kroupware&m=114018629
726046&w=2
> unfortunately that didnt work either.
> Is it possible for me to do what i am trying to achieve
with the current solution or do i need to reconfigure a
great deal? Because the user is auth'd when it hits the
server
> and they will always have to be to use 465 is there
anyway of bypassing the kolabfilter on these emails?
> Also will i be able to do the same with Horde, Horde
runs on the same box as the Kolab installation, and If i set
127.0.0.1:smtp to call the content filter i think the email
> wont be delivered? At least it doesnt appear to be, and
the logs just say deferred.
>  
> I also looked at the script used in this solution: http://www.howtof
orge.com/add-disclaimers-to-outgoing-emails-with-altermime-p
ostfix-debian-etch
> again it didnt work, i wondered if that was something
to do with it being for debian?
>  
> I would appreciate any feedback you can offer on the
best way forward, or even if it is possible.
>  
> Thanks
> Nigel
>  
> PS. Lets hope the list works properly with my hotmail
address 
>
>
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━━━━
━━━━━━━━━━━━━━━━━
> Sounds like? How many syllables? Guess and win prizes
with Search Charades!
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https:
//kolab.org/mailman/listinfo/kolab-users

-- 
______ http://kdab.com
_______________ http://kolab-konsortium.c
om _

prdus Kolab work is funded in part by KDAB and the
Kolab Konsortium

____ http://www.pardus.de
_________________ http://gunnarwrobel.de _
E-mail : prdus.de                                 Dr. Gunnar
Wrobel
Tel.   : +49 700 6245 0000                         
Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146
Hamburg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~
   >> Mail at ease - Rent a kolab groupware server at
prdus <<                 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users
Re: KolabFilter Forged Header and :465
country flaguser name
Netherlands
2008-03-11 01:55:29
Op Tuesday 11 March 2008 06:47:19 schreef Gunnar Wrobel:
> I'm not really certain if I can give you useful advice
on installing
> Altermime since I never used this. But I'd expect that
you need to
> specify the content filter for the smtpd running on
port 465:
>
> 465       inet  n       -       n       -
      -       smtpd -o
> smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
-o
> content_filter=dfilt:
>
> I'm not entirely certain that this will work though ;)

Does this help:
htt
p://wiki.kolab.org/index.php/Adding_disclaimer

-- 
Richard Bos
We are borrowing the world of our children,
It is not inherited from our parents.

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users
Re: KolabFilter Forged Header and :465
country flaguser name
Germany
2008-03-11 01:59:16
Richard Bos <mlradoeka.nl> writes:

> Op Tuesday 11 March 2008 06:47:19 schreef Gunnar
Wrobel:
>> I'm not really certain if I can give you useful
advice on installing
>> Altermime since I never used this. But I'd expect
that you need to
>> specify the content filter for the smtpd running on
port 465:
>>
>> 465       inet  n       -       n    
  -       -       smtpd -o
>> smtpd_tls_wrappermode=yes -o
smtpd_sasl_auth_enable=yes -o
>> content_filter=dfilt:
>>
>> I'm not entirely certain that this will work though
;)
>
> Does this help:
> htt
p://wiki.kolab.org/index.php/Adding_disclaimer

That is what he originally used but it did not seem to work


Cheers,

Gunnar

>
> -- 
> Richard Bos
> We are borrowing the world of our children,
> It is not inherited from our parents.
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https:
//kolab.org/mailman/listinfo/kolab-users

-- 
______ http://kdab.com
_______________ http://kolab-konsortium.c
om _

prdus Kolab work is funded in part by KDAB and the
Kolab Konsortium

____ http://www.pardus.de
_________________ http://gunnarwrobel.de _
E-mail : prdus.de                                 Dr. Gunnar
Wrobel
Tel.   : +49 700 6245 0000                         
Bundesstrasse 29
Fax    : +49 721 1513 52322                          D-20146
Hamburg
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~
   >> Mail at ease - Rent a kolab groupware server at
prdus <<                 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~

_______________________________________________
Kolab-users mailing list
Kolab-userskolab.org
https:
//kolab.org/mailman/listinfo/kolab-users
RE: KolabFilter Forged Header and :465
country flaguser name
United Kingdom
2008-03-11 02:54:46
Hi Guys
Thanks for your feedback, In the end i had to turn off the reject forged header check by setting it to false in the resmgr.conf, not sure that was the right thing to do tho!
 
Thanks again
N


> To: mlradoeka.nl
> Subject: Re: KolabFilter Forged Header and :465
> From: wrobelpardus.de
> Date: Tue, 11 Mar 2008 07:59:16 +0100
> CC: kolab-userskolab.org
>
> Richard Bos <mlradoeka.nl> writes:
&gt;
> > Op Tuesday 11 March 2008 06:47:19 schreef Gunnar Wrobel:
&gt; >> I'm not really certain if I can give you useful advice on installing
> >> Altermime since I never used this. But I'd expect that you need to
> >> specify the content filter for the smtpd running on port 465:
> >>
&gt; >> 465       inet  n       -       n       -       -       smtpd -o
> >> smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o
> >> content_filter=dfilt:
> >>
&gt; >> I'm not entirely certain that this will work though ;)
> >
> > Does this help:
> > http://wiki.kolab.org/index.php/Adding_disclaimer
>
> That is what he originally used but it did not seem to work
>
> Cheers,
&gt;
> Gunnar
>;
> >
> > --
> > Richard Bos
> > We are borrowing the world of our children,
> > It is not inherited from our parents.
&gt; >
> > _______________________________________________
> > Kolab-users mailing list
> > Kolab-userskolab.org
> > https://kolab.org/mailman/listinfo/kolab-users
>
> --
> ______ http://kdab.com _______________ http://kolab-konsortium.com _
>
> prdus Kolab work is funded in part by KDAB and the Kolab Konsortium
>
> ____ http://www.pardus.de _________________ http://gunnarwrobel.de _
> E-mail : prdus.de Dr. Gunnar Wrobel
>; Tel. : +49 700 6245 0000 Bundesstrasse 29
> Fax : +49 721 1513 52322 D-20146 Hamburg
&gt; ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >> Mail at ease - Rent a kolab groupware server at prdus <<
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-userskolab.org
> https://kolab.org/mailman/listinfo/kolab-users



Think you know your TV, music and film? Try Search Charades!
[1-5]

about | contact  Other archives ( Real Estate discussion Medical topics )