Oh god forgive me .... :-/ sorry pfctl -t spamd -Ts ...
On 28 May 2015 at 15:46, Didier Wiroth <[email protected]> wrote: > Hello, > I installed a new machine a few hours ago with a current snapshot. > I'm running spamd in blacklist mode but I look like "spamd-setup -b" > does not update the spamd table. > May be I miss something ... > > My rc.conf.local contains the following line: > spamd_flags="-v -b" > > $ cat /etc/mail/spamd.conf > > all:\ > :uatraps:nixspam:bsdly > > # University of Alberta greytrap hits. > # Addresses stay in it for 24 hours from time they misbehave. > uatraps:\ > :black:\ > :msg="Your address %A has sent mail to a ualberta.ca spamtrap\n\ > within the last 24 hours":\ > :method=http:\ > :file=www.openbsd.org/spamd/traplist.gz > > # Nixspam recent sources list. > # Mirrored from http://www.heise.de/ix/nixspam > nixspam:\ > :black:\ > :msg="Your address %A is in the nixspam list\n\ > See http://www.heise.de/ix/nixspam/dnsbl_en/ for details":\ > :method=http:\ > :file=www.openbsd.org/spamd/nixspam.gz > > bsdly:\ > :black:\ > :msg="Your address %A is in the bsdly.net list\n\ > See http://www.bsdly.net/~peter/traplist.shtml for details":\ > :method=http:\ > :file=www.bsdly.net/~peter/bsdly.net.traplist > > > My pf contains the following table and rule: > table <spamd> persist > table <spamd2> persist > pass in log quick on $ext_if inet proto tcp from { <spamd> , <spamd2> > } to $ext_if port smtp divert-to 127.0.0.1 port spamd > > Root's crontab has: > 0 * * * * sleep $((RANDOM \% 1800)) && > /usr/libexec/spamd-setup -b > > If I run manually spamd-setup with debugging and blacklist mode: > $ sudo /usr/libexec/spamd-setup -bd > Getting http://www.openbsd.org/spamd/traplist.gz > blacklist uatraps 38373 entries > Getting http://www.openbsd.org/spamd/nixspam.gz > blacklist nixspam 31796 entries > Getting http://www.bsdly.net/~peter/bsdly.net.traplist > blacklist bsdly 2837 entries > > But the problem is the <spamd> table is not updated: > $ sudo pfctl -t spamd | wc -l > 0 > > What ever I try ... spamd-setup does not update the pf rule. > > Do I miss something? > > Thank you very much! > Didier -- Didier Wiroth
