#------------------------------------------------------
# DESCRIPTION OF THE RULES TO REMIND ME OF HOW THIS FILE WORKS
#
# If you set 'allow', this means that our mail server will allow
# the specified IP range to make a TCP connection to our server
#
# If you set 'deny', this means that our mail server will not allow
# the specified IP range to make a TCP connection to our server
#
# If you set RELAYCLIENT="", this means that the listed IP range is 
# allowed to relay mail through our server
#
# If you dont set RELAYCLIENT="", this means that the listed IP range
# will not be able to relay mail through our server
#
# If you set RBLSMTPD="", this means that the listed IP ranges will
# not be checked against any of the RBL databases
#
# If you set RBLSMTPD="some text here", this means that an RBL lookup
# wont be performed, but the mail will be rejected with the specified
# text as a 4xx temp error message
#
# If you set RBLSMTPD="-some text here", this means that an RBL lookup
# wont be performed, but the mail will be rejected with the specified
# text as a 5xx perm error message
#
# If you do not set RBLSMTPD="" or ="some text", then an RBL lookup
# will be performed. If the lookup is successful, then RBLSMTPD will
# return your custom error message (as specified in the -r parameter
# in smtpd supervise script)
#
#-----------------------------------------------------
# HERE ARE THE RULES! :
#-----------------------------------------------------
# BYPASS OPEN RELAY CHECKING FOR THESE IPS :
#
# These IPs are ones that we have setup so that they arent RBL checked.
# We have done this because these particular servers are RBL listed,
# and for whatever reason they can't/won't fix their open relay problem,
# and we still want to be able to receive mail from them.
# 
# reminder text goes here for this entry so we know the story...
111.111.111.111:allow,RBLSMTPD=""
# reminder text goes here for this entry so we know the story...
222.222.222.222:allow,RBLSMTPD=""
#
#-----------------------------------------------------------------
# DONT ALLOW THESE IPS TO SEND MAIL TO US :
#
# mailXX.offermail.net connecting regularly and sending invalid
# format messages causing exit with status 256 (bare linefeed normally)
# entry added 15/12/2001
# after looking at the mail coming from these servers it was found to be spam
216.242.75.100-116:allow,RBLSMTPD="-Connections from this IP have been banned."
#
# heaps of spam from replyto of *@freeamateurhotties.com dec2001
64.228.127.:allow,RBLSMTPD="-Connections refused due to spam from freeamateurhotties.com"
154.20.94.:allow,RBLSMTPD="-Connections refused due to spam from freeamateurhotties.com"
209.151.132.:allow,RBLSMTPD="-Connections refused due to spam from freeamateurhotties.com"
216.18.85.:allow,RBLSMTPD="-Connections refused due to spam from freeamateurhotties.com"
#
#-----------------------------------------------------------------
# ALLOW THESE IPS TO RELAY MAIL THROUGH OUR SERVER
#
# Local class-c's from our LAN are allowed to relay,
# and we wont bother doing any RBL checking.
123.123.123.:allow,RELAYCLIENT="",RBLSMTPD=""
123.111.111.:allow,RELAYCLIENT="",RBLSMTPD=""
#
# Connections from localhost are allowed to relay 
# (because the WebMail server runs on localhost),
# and obviously there is no point trying to perform an RBL check.
127.0.0.1:allow,RELAYCLIENT="",RBLSMTPD=""
#
#-----------------------------------------------------------------
# ALLOW EVERYONE ELSE TO SEND US MAIL
#
# Everyone else can make connections to our server,
# but not allowed to relay
# RBL lookups are performed
:allow

# Allow any client to connect to us via POP3
# If people are abusing POP3 such as denial-of-service on POP3, 
# you can add their ips here to block them out
:allow

exec /usr/local/bin/softlimit -m 32000000 \
/usr/local/bin/tcpserver -v -H -R -l 0 -P -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 25 /usr/local/bin/rblsmtpd -b -r sbl-xbl.spamhaus.org -b -r dnsbl.njabl.org /var/qmail/bin/qmail-smtpd >> /var/log/qmail/rblsmtpd.log 2>&1

#!/bin/sh
# This bootscript for qmail is only used with daemontools installed
# it won't run at all
# chkconfig: 2345 80 30
# description: qmail as MTA

PATH=/var/qmail/bin:/usr/local/bin:/usr/bin:/bin
export PATH

case "$1" in
start)
    echo "Starting qmail"
    if svok /service/qmail-send ; then
      svc -u /service/qmail-send /service/qmail-send/log
    else
      echo "qmail-send supervise not running"
    fi
    if svok /service/qmail-smtpd ; then
      svc -u /service/qmail-smtpd /service/qmail-smtpd/log
    else
      echo "qmail-smtpd supervise not running"
    fi
    if [ -d /var/lock/subsys ]; then
      touch /var/lock/subsys/qmail
    fi
    ;;
  stop)
    echo "Stopping qmail..."
    echo "  qmail-smtpd"
    svc -d /service/qmail-smtpd /service/qmail-smtpd/log
    echo "  qmail-send"
    svc -d /service/qmail-send /service/qmail-send/log
    if [ -f /var/lock/subsys/qmail ]; then
      rm /var/lock/subsys/qmail
    fi
    ;;
  stat)
    svstat /service/qmail-send
    svstat /service/qmail-send/log
    svstat /service/qmail-smtpd
    svstat /service/qmail-smtpd/log
    qmail-qstat
    ;;
  doqueue|alrm|flush)
    echo "Flushing timeout table and sending ALRM signal to qmail-send."
    /var/qmail/bin/qmail-tcpok
    svc -a /service/qmail-send
    ;;
  queue)
    qmail-qstat
    qmail-qread
    ;;
  reload|hup)
    echo "Sending HUP signal to qmail-send."
    svc -h /service/qmail-send
    ;;
  pause)
    echo "Pausing qmail-send"
    svc -p /service/qmail-send
    echo "Pausing qmail-smtpd"
    svc -p /service/qmail-smtpd
    ;;
  cont)
    echo "Continuing qmail-send"
    svc -c /service/qmail-send
    echo "Continuing qmail-smtpd"
    svc -c /service/qmail-smtpd
    ;;
  restart)
    echo "Restarting qmail:"
    echo "* Stopping qmail-smtpd."
    svc -d /service/qmail-smtpd /service/qmail-smtpd/log
    echo "* Sending qmail-send SIGTERM and restarting."
    svc -t /service/qmail-send /service/qmail-send/log
    echo "* Restarting qmail-smtpd."
    svc -u /service/qmail-smtpd /service/qmail-smtpd/log
    ;;
  cdb)
    echo "Don't forget to modify the /etc/smtprules/qmail-rules.txt first or it will use the old cdb"
    cat /etc/smtprules/qmail-rules.txt | tcprules /etc/tcp.smtp.cdb /tmp/tcp.smtp.tmp
    chmod 644 /etc/tcp.smtp*
    echo "Reloaded /etc/tcp.smtp.cdb"
    ;;
  help)
    cat <<HELP
   stop -- stops mail service (smtp connections refused, nothing goes out)
  start -- starts mail service (smtp connection accepted, mail can go out)
  pause -- temporarily stops mail service (connections accepted, nothing leaves)
   cont -- continues paused mail service
   stat -- displays status of mail service
    cdb -- rebuild the tcpserver cdb file for smtp
restart -- stops and restarts smtp, sends qmail-send a TERM & restarts it
doqueue -- sends qmail-send ALRM, scheduling queued messages for delivery
 reload -- sends qmail-send HUP, rereading locals and virtualdomains
  queue -- shows status of queue
   alrm -- same as doqueue
    hup -- same as reload
HELP
    ;;
  *)
    echo "Usage: $0 {start|stop|restart|doqueue|reload|stat|pause|cont|cdb|queue|help}"
    exit 1
    ;;
esac

exit 0

http://www.lifewithqmail.org/lwq.html#start-qmail

http://www.bowe.id.au/michael/isp/webmail-server.htm#QMAIL

[root@linux control]# ls -la
total 56
drwxr-xr-x    2 root     qmail        4096 Sep 11 00:57 .
drwxr-xr-x   14 root     qmail        4096 Sep 10 21:56 ..
-rw-r--r--    1 root     root           11 Sep 10 16:40 bouncefrom
-rw-r--r--    1 root     root            3 Sep 10 21:58 concurrencyincoming
-rw-r--r--    1 root     root            9 Sep 10 19:54 databytes
-rw-r--r--    1 root     root           11 Sep 10 16:42 defaultdelivery
-rw-r--r--    1 root     root           10 Sep  9 23:00 defaultdomain
-rw-r--r--    1 root     root           10 Sep 10 16:40 doublebouncehost
-rw-r--r--    1 root     root           13 Sep 10 16:40 doublebounceto
-rw-r--r--    1 root     root           20 Sep  9 23:01 locals
-rw-r--r--    1 root     root           48 Sep 11 00:57 me
-rw-r--r--    1 root     root           10 Sep  9 23:00 plusdomain
-rw-r--r--    1 root     root            7 Sep 10 19:54 queuelifetime
-rw-r--r--    1 root     root           20 Sep  9 23:01 rcpthosts

[root@linux supervise]# ls -la
total 20
drwxr-xr-x    5 root     root         4096 Sep 10 20:55 .
drwxr-xr-x   14 root     qmail        4096 Sep 10 21:56 ..
drwxr-xr-t    4 root     root         4096 Sep 10 21:45 qmail-pop3d
drwxr-xr-t    4 root     root         4096 Sep 10 21:49 qmail-send
drwxr-xr-t    4 root     root         4096 Sep 11 00:58 qmail-smtpd

#!/bin/sh
exec /usr/local/bin/softlimit -m 2000000 \
    /usr/local/bin/tcpserver -v -R -H -l 0 0 110 /var/qmail/bin/qmail-popup \
        mydomain.local /bin/checkpassword /var/qmail/bin/qmail-pop3d Maildir 2>&1

#!/bin/sh
exec /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t \
    /var/log/qmail/pop3d

#!/bin/sh
exec /var/qmail/rc

#!/bin/sh
exec /usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t s5000000000 /var/log/qmail

#!/bin/sh

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`

if [ -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z "$LOCAL" ]; then
    echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
    echo /var/qmail/supervise/qmail-smtpd/run
    exit 1
fi

if [ ! -f /var/qmail/control/rcpthosts ]; then
    echo "No /var/qmail/control/rcpthosts!"
    echo "Refusing to start SMTP listener because it'll create an open relay"
    exit 1
fi

exec /usr/local/bin/softlimit -m 2000000 \
    /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c "$MAXSMTPD" \
        -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp /var/qmail/bin/qmail-smtpd 2>&1

#!/bin/sh
/usr/local/bin/setuidgid qmaill /usr/local/bin/multilog t /var/log/qmail/smtpd

#!/bin/sh

# Using stdout for logging
# Using control/defaultdelivery from qmail-local to deliver messages by default

exec env - PATH="/var/qmail/bin:$PATH" \
qmail-start "`cat /var/qmail/control/defaultdelivery`"

#!/bin/sh
# description: the qmail MTA
PATH=/var/qmail/bin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin
export PATH

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`

case "$1" in
start)
echo "Starting qmail"
if svok /service/qmail-send ; then
svc -u /service/qmail-send /service/qmail-send/log
echo "qmail-send started"
else
echo "qmail-send supervise not running"
fi
if svok /service/qmail-pop3d ; then
   svc -u /service/qmail-pop3d /service/qmail-pop3d/log
   echo "qmail-pop3d started"
else
   echo "qmail-pop3d supervise not running"
fi
if svok /service/qmail-smtpd ; then
   svc -u /service/qmail-smtpd /service/qmail-smtpd/log
   echo "qmail-smtpd started"
else
   echo "qmail-smtpd supervise not running"
fi
if [ -d /var/lock/subsys ]; then
touch /var/lock/subsys/qmail
fi
;;
stop)
echo "qmail-pop3d"
    svc -d /service/qmail-pop3d /service/qmail-pop3d/log
echo "Stopping qmail..."
echo " qmail-smtpd"
svc -d /service/qmail-smtpd /service/qmail-smtpd/log
echo " qmail-send"
svc -d /service/qmail-send /service/qmail-send/log
if [ -f /var/lock/subsys/qmail ]; then
rm /var/lock/subsys/qmail
fi
;;
stat)
svstat /service/qmail-pop3d
svstat /service/qmail-pop3d/log
svstat /service/qmail-send
svstat /service/qmail-send/log
svstat /service/qmail-smtpd
svstat /service/qmail-smtpd/log
qmail-qstat
;;
doqueue|alrm|flush)
echo "Flushing timeout table and sending ALRM signal to qmail-send."
/var/qmail/bin/qmail-tcpok
svc -a /service/qmail-send
;;
queue)
qmail-qstat
qmail-qread
;;
reload|hup)
echo "Sending HUP signal to qmail-send."
svc -h /service/qmail-send
;;
pause)
echo "Pausing qmail-pop3d"
svc -p /service/qmail-pop3d
echo "Pausing qmail-send"
svc -p /service/qmail-send
echo "Pausing qmail-smtpd"
svc -p /service/qmail-smtpd
;;
cont)
echo "Continuing qmail-pop3d"
svc -c /service/qmail-pop3d
echo "Continuing qmail-send"
svc -c /service/qmail-send
echo "Continuing qmail-smtpd"
svc -c /service/qmail-smtpd
;;
restart)
echo "* Restarting qmail-pop3d."
svc -t /service/qmail-pop3d /service/qmail-pop3d/log
echo "Restarting qmail:"
echo "* Stopping qmail-smtpd."
svc -d /service/qmail-smtpd /service/qmail-smtpd/log
echo "* Sending qmail-send SIGTERM and restarting."
svc -t /service/qmail-send /service/qmail-send/log
echo "* Restarting qmail-smtpd."
svc -u /service/qmail-smtpd /service/qmail-smtpd/log
;;
cdb)
tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp
chmod 644 /etc/tcp.smtp.cdb
echo "Reloaded /etc/tcp.smtp."
;;
help)
cat <<HELP
stop -- stops mail service (smtp connections refused, nothing goes out)
start -- starts mail service (smtp connection accepted, mail can go out)
pause -- temporarily stops mail service (connections accepted, nothing leaves)
cont -- continues paused mail service
stat -- displays status of mail service
cdb -- rebuild the tcpserver cdb file for smtp
restart -- stops and restarts smtp, sends qmail-send a TERM & restarts it
doqueue -- schedules queued messages for immediate delivery
reload -- sends qmail-send HUP, rereading locals and virtualdomains
queue -- shows status of queue
alrm -- same as doqueue
flush -- same as doqueue
hup -- same as reload
HELP
;;
*)
echo "Usage: $0 {start|stop|restart|doqueue|flush|reload|stat|pause|cont|cdb|queue|help}"
exit 1
;;
esac

exit 0

[root@linux bin]# ps -waux | grep qmail
root      1489  0.0  0.0  1376  236 ?        S    Sep10   0:08 readproctitle service errors: ...al: unable to lock directory /var/log/qmail/smtpd: temporary failure?multilog: fatal: unable to lock directory /var/log/qmail/smtpd: temporary failure?multilog: fatal: unable to lock directory /var/log/qmail/smtpd: temporary
root      6734  0.0  0.1  1384  280 ?        S    Sep10   0:04 supervise qmail-pop3d
root      7739  0.0  0.1  1384  280 ?        S    Sep10   0:00 supervise qmail-send
root      7797  0.0  0.1  1384  280 ?        S    Sep10   0:06 supervise qmail-smtpd
qmaill   10776  0.0  0.1  1516  340 ?        S    Sep10   0:01 /usr/local/bin/multilog t /var/log/qmail/smtpd
qmaild   22362  0.0  0.1  1596  484 ?        S    Sep10   0:00 tcpserver -v -u 711 -g 710 0 smtp relay-ctrl-check qmail-smtpd
qmaill   10507  0.0  0.1  1512  340 ?        S    01:25   0:00 /usr/local/bin/multilog t /var/log/smtpd

[root@linux bin]# /var/qmail/bin/qmail-showctl
qmail home directory: /var/qmail.
user-ext delimiter: -.
paternalism (in decimal): 2.
silent concurrency limit: 120.
subdirectory split: 23.
user ids: 710, 711, 712, 0, 713, 714, 715, 716.
group ids: 710, 711.

badmailfrom: (Default.) Any MAIL FROM is allowed.

bouncefrom: Bounce user name is postmaster.

bouncehost: (Default.) Bounce host name is mailsvr.mydomain.local.

concurrencylocal: (Default.) Local concurrency is 10.

concurrencyremote: (Default.) Remote concurrency is 20.

databytes: SMTP DATA limit is 10000000 bytes.

defaultdomain: Default domain name is mydomain.local.

defaulthost: (Default.) Default host name is mailsvr.mydomain.local.

doublebouncehost: 2B recipient host: mydomain.local.

doublebounceto: 2B recipient user: doublebounce.

envnoathost: (Default.) Presumed domain name is mailsvr.mydomain.local.

helohost: (Default.) SMTP client HELO host name is mailsvr.mydomain.local.

idhost: (Default.) Message-ID host name is mailsvr.mydomain.local.

localiphost: (Default.) Local IP address becomes mailsvr.mydomain.local.

locals: 
Messages for localhost are delivered locally.
Messages for mydomain.local are delivered locally.

me: My name is mailsvr.mydomain.local.

percenthack: (Default.) The percent hack is not allowed.

plusdomain: Plus domain name is mydomain.local.

qmqpservers: (Default.) No QMQP servers.

queuelifetime: Message lifetime in the queue is 345600 seconds.

rcpthosts: 
SMTP clients may send messages to recipients at localhost.
SMTP clients may send messages to recipients at mydomain.local.

morercpthosts: (Default.) No effect.

morercpthosts.cdb: (Default.) No effect.

smtpgreeting: (Default.) SMTP greeting: 220 mailsvr.mydomain.local.

smtproutes: (Default.) No artificial SMTP routes.

timeoutconnect: (Default.) SMTP client connection timeout is 60 seconds.

timeoutremote: (Default.) SMTP client data timeout is 1200 seconds.

timeoutsmtpd: (Default.) SMTP server data timeout is 1200 seconds.

virtualdomains: (Default.) No virtual domains.

defaultdelivery: I have no idea what this file does.

concurrencyincoming: I have no idea what this file does.

qmailctl stop

[root@linux bin]# qmailctl stat
/service/qmail-pop3d: down 2935 seconds, normally up
/service/qmail-pop3d/log: down 2935 seconds, normally up
/service/qmail-send: down 2935 seconds, normally up
/service/qmail-send/log: down 2935 seconds, normally up
/service/qmail-smtpd: down 2935 seconds, normally up
/service/qmail-smtpd/log: down 2935 seconds, normally up
messages in queue: 2
messages in queue but not yet preprocessed: 2

qmailctl start

[root@linux bin]# qmailctl stat
/service/qmail-pop3d: up (pid 7504) 20 seconds
/service/qmail-pop3d/log: up (pid 7505) 20 seconds
/service/qmail-send: up (pid 7500) 20 seconds
/service/qmail-send/log: up (pid 7501) 20 seconds
/service/qmail-smtpd: up (pid 7659) 1 seconds
/service/qmail-smtpd/log: up (pid 7657) 1 seconds
messages in queue: 0
messages in queue but not yet preprocessed: 0