OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Mail question

From: Alexandros G. Fragkiadakis (alfragecon.soc.uoc.gr)
Date: Mon Nov 05 2007 - 03:27:15 CST


Jgrimmer wrote:
> here are the logs that i have :
> mail.info:
> Nov 4 23:26:57 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], command=USER
> Nov 4 23:26:57 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], command=PASS
> Nov 4 23:26:57 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], username=user1fubar.com
> Nov 4 23:26:57 pill courierpop3login: LOGIN, user=user1fubar.com,
> ip=[::ffff:192.168.1.29]
> Nov 4 23:26:57 pill courierpop3login: LOGOUT, user=user1fubar.com,
> ip=[::ffff:192.168.1.29], top=0, retr=0, time=0
>
> syslog:
> Nov 4 23:27:01 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], command=USER
> Nov 4 23:27:01 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], command=PASS
> Nov 4 23:27:01 pill courierpop3login: LOGIN: DEBUG:
> ip=[::ffff:192.168.1.29], username=user1fubar.com
> Nov 4 23:27:01 pill courierpop3login: authdaemon: starting client module
> Nov 4 23:27:01 pill authdaemond.mysql: received auth request,
> service=pop3, authtype=login
> Nov 4 23:27:01 pill authdaemond.mysql: authmysql: trying this module
> Nov 4 23:27:01 pill authdaemond.mysql: SQL query: SELECT mailid, "",
> clear, uid, gid, home, concat(home, '/', maildir), quota,
> name, "" FROM users WHERE mailid = "user1fubar.com" AND (access='y')
> Nov 4 23:27:01 pill authdaemond.mysql: authmysql: sysusername=<null>,
> sysuserid=100136, sysgroupid=100, homedir=/var/spool/mail/virtua
> l, address=user1fubar.com, fullname=user1,
> maildir=/var/spool/mail/virtual/user1, quota=<null>, options=<null>
> Nov 4 23:27:01 pill authdaemond.mysql: authmysql: clearpasswd=password,
> passwd=<null>
> Nov 4 23:27:01 pill authdaemond.mysql: authmysql: ACCEPT, username
> user1fubar.com
> Nov 4 23:27:01 pill courierpop3login: authdaemon: ACCEPT, username
> user1fubar.com
> Nov 4 23:27:01 pill courierpop3login: LOGIN, user=user1fubar.com,
> ip=[::ffff:192.168.1.29]
> Nov 4 23:27:01 pill courierpop3login: LOGOUT, user=user1fubar.com,
> ip=[::ffff:192.168.1.29], top=0, retr=0, time=0
>
> mysql.log
> 071104 23:27:00 58 Query SELECT mailid, "", clear, uid, gid,
> home, concat(home, '/', maildir), quota, name, "" FROM use
> rs WHERE mailid = "user1fubar.com" AND (access='y')
> 58 Query SELECT mailid, "", clear, uid, gid,
> home, concat(home, '/', maildir), quota, name, "" FROM use
> rs WHERE mailid = "user1fubar.com" AND (access='y')
> 071104 23:27:01 58 Query SELECT mailid, "", clear, uid, gid,
> home, concat(home, '/', maildir), quota, name, "" FROM use
> rs WHERE mailid = "user1fubar.com" AND (access='y')
>
> and there are no errors from the mail client either. is there a way to
> make the logs more verbose ?
>
>
>
>
>
> Alexandros G. Fragkiadakis wrote:
>> Jgrimmer wrote:
>>> i just signed on to the list not sure if i'm doing this right. i have
>>> a question for the list. i have set up post fix and managed to fix
>>> the many authentication issues i was having. it appears to
>>> authenticating and the mail is going out but not coming in ? i am
>>> not sure what it could be the logs are showing no errors that i can
>>> tell. when i run mailq it says the que is epmty. i have set up the
>>> maildir 's as /var/spool/mail/virtual/username and the mysql database
>>> seems to be working, so why is the mail not coming in ? what should i
>>> check ?
>>>
>>
>> when you send an email to your server what can you see in the logs?
>> Does it reach your server? is it dropped for some reason?
>>
>
These are the logs related to the imap/pop server. Any logs from
postfix? see in var/log/mail

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.