[spamdyke-users] Still using 4.3.1

2015-02-02 Thread Faris Raouf via spamdyke-users
Dear all, Forgive me for asking this question - I'm not a coder. I've noticed that a few systems I look after use Spamdyke 4.3.1, compiled back in 2012 or 2013. Are there any security issues with this version? Would any of the various vulnerabilities found in certain ancillary linu

Re: [spamdyke-users] Still using 4.3.1

2015-02-04 Thread Faris Raouf via spamdyke-users
Thanks Sam. That's put my mind at ease. To my knowledge, there are no security issues in version 4.3.1. I've since fixed several bugs that can cause crashes, but nothing I can imagine could be a security risk. There have been recent bugs in OpenSSL and glibc; those libraries should definit

[spamdyke-users] RBL DNS query numbers

2016-01-15 Thread Faris Raouf via spamdyke-users
Dear Sam/everyone, With verbose logging enabled, is it reasonable to assume that the only time the RBLs Spamdyke is configured to use are actually queried is when a FILTER_RBL_MATCH appears in the log? The reason I'm asking is that there seem to be an order of magnitude more DENIED_RBL_MAT

Re: [spamdyke-users] RBL DNS query numbers

2016-01-18 Thread Faris Raouf via spamdyke-users
Thanks Sam! From: spamdyke-users [mailto:spamdyke-users-boun...@spamdyke.org] On Behalf Of Sam Clippinger via spamdyke-users Sent: 17 January 2016 19:49 To: spamdyke users Subject: Re: [spamdyke-users] RBL DNS query numbers I think you're exactly right -- the filter was triggered once

[spamdyke-users] Help getting TLS to work please

2016-03-09 Thread Faris Raouf via spamdyke-users
Dear all, I'm stuck with a qmail installation that doesn't support TLS, so I'm trying to get Spamdyke to deal with it on incoming connections. Unfortunately I've not managed to get it to work - I get the following error in the maillog when testing: ** unable to start SSL/TLS connec

Re: [spamdyke-users] Help getting TLS to work please

2016-03-09 Thread Faris Raouf via spamdyke-users
> From: spamdyke-users [mailto:spamdyke-users-boun...@spamdyke.org] On > Behalf Of Alessio Cecchi via spamdyke-users > For me works fine with: > > tls-level=smtp-no-passthrough > tls-certificate-file=/var/ssl/wildcard.pem > > and in /var/ssl/wildcard.pem there is a chain like this: > > CERTIFICA

Re: [spamdyke-users] Help getting TLS to work please

2016-03-10 Thread Faris Raouf via spamdyke-users
> Behalf Of Alessio Cecchi via spamdyke-users > Sent: 10 March 2016 08:00 > > Hi, > > if you use spamdyke fixcrio is no more necessary. > -- Ah, that's what I thought. The notes I have say that spamdyke takes care of the bare LFs. But because I could not remember if I added it to the tcpserver

[spamdyke-users] Sensible greeting delay?

2016-03-11 Thread Faris Raouf via spamdyke-users
Dear all, Recently I've noticed that massive numbers of (presumably botnet) senders are blocked by the earlytalker filter when greeting-delay-secs=11 but only a fraction as many if I set it to 10 or less. I'm guessing that the current main botnets are set to start talking after 10 seconds eve

[spamdyke-users] ip-in-rdns-keyword - are hyphens supported?

2016-05-06 Thread Faris Raouf via spamdyke-users
Dear all, Does ip-in-rdns-keyword-* only look for IPs delimited by periods, or does it allow hyphens too? The reason I'm asking is that I want to block senders with rDNS that look similar to this: dsl-111-222-333-444-dyn.domain.tld So if it does look for hyphens as well as periods,

Re: [spamdyke-users] ip-in-rdns-keyword - are hyphens supported?

2016-05-08 Thread Faris Raouf via spamdyke-users
Aha! Thanks Gary. I'd missed the vital "the dots in the examples below can be any single character" when reading this. Thank you! From: Gary Gendel [mailto:g...@genashor.com] Sent: 06 May 2016 16:24 To: Faris Raouf ; spamdyke users Subject: Re: [spamdyke-users] ip-in-rdns-keyword -

[spamdyke-users] can't block envelope sender

2016-07-21 Thread Faris Raouf via spamdyke-users
Dear all, I'm having a bit of an issue trying to block messages based on the envelope sender. Basically it doesn't seem to work at all, so I'm obviously doing something wrong. All the other types of blacklists and whitelists seem to work just fine. I understand the difference between the "From"

Re: [spamdyke-users] can't block envelope sender

2016-07-21 Thread Faris Raouf via spamdyke-users
Thanks Sam. That's brilliant and hugely helpful. I'll try to do this this evening, and failing that over the weekend. I will also check the whitelists again in case I missed something. Yes, ms2 is the edge server and that's where the sender is backlisted, although I've just added it to

Re: [spamdyke-users] can't block envelope sender

2016-07-22 Thread Faris Raouf via spamdyke-users
Hi Sam, I just had a chance to have a go with the tests, and just as you expected it was down to the rDNS of the sender being whitelisted. I don't know how many times I'd checked, and missed seeing it :) Unfortunately I can't remember why I whitelisted it :( It belongs to an ESP. If they

Re: [spamdyke-users] can't block envelope sender

2016-07-27 Thread Faris Raouf via spamdyke-users
Yup! That would be great. I just think it would be useful to know it is happening, and where to look, sort of thing. From: spamdyke-users [mailto:spamdyke-users-boun...@spamdyke.org] On Behalf Of Sam Clippinger via spamdyke-users Sent: 25 July 2016 14:50 To: spamdyke users Subject: Re: [spamdy

[spamdyke-users] spam with rDNS resolving to "localhost"

2016-08-09 Thread Faris Raouf via spamdyke-users
Dear all, We're having problems with spam being allowed in from IPs with rDNS resolving to "localhost". This gets past the reject-empty-rdns filter. Initially I thought these IPs has no rDNS - using dnsstuff, I get no result (normally meaning no rDNS). But using host or dig I see the IPs r

Re: [spamdyke-users] spam with rDNS resolving to "localhost"

2016-08-12 Thread Faris Raouf via spamdyke-users
other IPs. -- Sam Clippinger On Aug 9, 2016, at 5:02 AM, Faris Raouf via spamdyke-users mailto:spamdyke-users@spamdyke.org> > wrote: Dear all, We're having problems with spam being allowed in from IPs with rDNS resolving to "localhost". This gets past the reje

[spamdyke-users] Localhost relaying denied

2016-10-03 Thread Faris Raouf via spamdyke-users
Dear all, I'm absolutely confounded by a problem I'm having after upgrading five systems from Spamdyke 4.3.1 to 5.0.1 On two of them, webmail (running locally, connecting from 127.0.0.1 to 127.0.0.1 port 25 via smtp, no authentication) works fine and can send messages. On the other thre

Re: [spamdyke-users] Localhost relaying denied

2016-10-07 Thread Faris Raouf via spamdyke-users
t on disk, it'll probably just get overwritten the next time Plesk saves a change. -- Sam Clippinger On Oct 3, 2016, at 7:58 AM, Faris Raouf via spamdyke-users mailto:spamdyke-users@spamdyke.org> > wrote: Dear all, I'm absolutely confounded by a problem I'