Re: [cobalt-users] RaQ4 problem with GUI not saving changed settings

["Zeffie" <cobaltlist@xxxxxxxx>]

----- Original Message on  12-16-2003 ----- 
From: "Malcolm Hills"
Subject: [cobalt-users] RaQ4 problem with GUI not saving changed settings

this is the problem..
> I started receiving bounce messages from AOL stating that my server was
> acting as an open relay.

this is Malcolm discovering the broken poprelayd checkbox.

> went into GUI initially to check pop before smtp
> status - which was as expected ticked,  decided to uncheck it, the reset
it
> on again.  It unchecked OK and saved, however since then I have been
unable
> to rest the pop before smtp check box or save any changes to the "relay
for
> the following Hosts/Domains boxes"
> Can someone please either give me a fix for this or point me to right
article in the archives.
> Malcolm

I think you might have a variety of problems...
you should still be able to make changes to the "relay for the following
Hosts/Domains boxes"
it's possible that your "mail related files" have become "locked" somehow
and now the cobalt gui script can't modify them...  but thats not the
original problem here...

poprelayd
this has nothing to do with the cause of your problem.

checking your poprelayd was covered and it needs a few corrections...
[root]# chkconfig --list poprelayd
poprelayd       0:off   1:off   2:off   3:on    4:off   5:off   6:off
this changed to only running at runlevel 3 for obvious reasons.
if it's off then do this
[root]# chkconfig --level 3 poprelayd on

How to check if poprelayd is running
[root]# ps -fC poprelayd
and if you get this...
UID        PID  PPID  C STIME TTY          TIME CMD
root      1832     1  0 Dec10 ?        00:00:00 perl
/usr/local/sbin/poprelayd -d
it's running...  if you don't get something like that then it's not running
and you should do this
[root]# /etc/rc.d/init.d/poprelayd start
and then to check if it's running
[root]# ps -fC poprelayd
if it is... well who cares about the gui...  :)

Top
IMHO there are very few uses for top...  I would almost say it sucks...  ps
is your friend...

This page...
http://www.nuonce.net/cobalt-smtp-blackhole.php
I would be tempted to call this mis-information...  it's not correct and I
would think it might not work...  no matter how many people... umm..  I mean
"list users" say it does...  no I will not try it either... there is no
reason to...  I already know how the cf is built and I have already made a
RaQ4 sendmail.cf builder at http://cfbuilder.zeffie.com/ and if you would
like to play with the cobalt cobalt.mc file then this is the place...  (for
a default sendmail.cf just press the button)

AOL (Oh ya the problem)
You need to find out how spammers are using your box... I would suggest you
look for old mail sending programs as they seem to be a loved so much... and
install a sendmail analyzer and watch it... check your access file, see if
you have been hacked, look at your apache logs and see what cgi's are
running thousands of times, see if users have been sending tons of mail,
etc, etc...

It has nothing to do with poprelayd unless your using a very old version
that allows spamming.

Zeffie
Cobalt RaQ System Administration, Maintenance and Repairs.
http://www.zeffie.com/how_to_contact_zeffie.html 734.454.9117
http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms
Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus and other
GUI's