sorry for send dirty  mail .
so  i resend  .

perhaps  dreams come true , but test is needed.


------------------

All tests performed, no relays accepted.
------------------


1) mail+nginx-server.bat-openSMTPD-spam

pfctl -f /etc/mail/black.pf
pfctl -sr
/etc/rc.d/smtpd         restart
/etc/rc.d/dovecot       restart
echo '----------------'
echo '----------------'
echo '----------------'
echo '----------------'
/etc/rc.d/spamd         -f restart
ps ax| grep spam
/etc/rc.d/spamlogd      -f restart
ps ax| grep spam
/usr/libexec/spamd-setup



2)/et/mail/black.pf

ext_if="em0"
tcp_services="{  22,     80,      143 }"
icmp_types="echoreq"
set block-policy return
set loginterface $ext_if
set skip on lo
set reassemble yes no-df
block in log
pass out quick
antispoof quick for { lo }
pass in on $ext_if proto tcp to any port submission
table <spamd-white> persist
table <nospamd> persist file "/etc/mail/nospamd"
pass in on $ext_if proto tcp from any to any port smtp rdr-to 127.0.0.1 port spamd
pass in on $ext_if proto tcp from <nospamd> to any port  smtp
pass in log     on $ext_if proto tcp from any to any port smtp
pass out log on $ext_if proto tcp to any port smtp
pass in on $ext_if inet proto tcp from any to ( $ext_if:0 ) port $tcp_services
pass in inet proto icmp all icmp-type $icmp_types
pass in on $ext_if proto tcp to port 21
pass in on $ext_if proto tcp to port > 4915


3)/etc/rc.conf.local

ftpd_flags="-llUSA"
smtpd_flags=""
pf=YES                  # Packet filter / NAT
pf_rules=/etc/pf.conf           # Packet filter rules file


4) /etc/mai/nospamd

114.22.25.247




ex) netstat -na -f inet
Active Internet connections (including servers)
Proto   Recv-Q Send-Q  Local Address          Foreign Address (state)
ip           0      0  *.*                    *.* 17
Active Internet connections (including servers)
Proto   Recv-Q Send-Q  Local Address          Foreign Address (state)
tcp 0 0 157.7.208.141.143 61.214.236.211.33448 ESTABLISHED tcp 0 0 157.7.208.141.143 61.214.236.211.33447 ESTABLISHED
tcp          0     68  157.7.208.141.22       43.229.53.19.43408 ESTABLISHED
tcp 0 44 157.7.208.141.22 114.22.25.247.44421 ESTABLISHED tcp 0 0 157.7.208.141.143 114.22.25.247.60516 ESTABLISHED tcp 0 0 157.7.208.141.143 114.22.25.247.60514 ESTABLISHED tcp 0 0 157.7.208.141.143 114.22.25.247.60513 ESTABLISHED tcp 0 0 157.7.208.141.143 114.22.25.247.60511 ESTABLISHED
tcp          0      0  127.0.0.1.25           *.* LISTEN
tcp          0      0  157.7.208.141.25       *.* LISTEN
tcp          0      0  *.21                   *.* LISTEN
tcp          0      0  157.7.208.141.587      *.* LISTEN
tcp          0      0  *.993                  *.* LISTEN
tcp          0      0  *.8025                 *.* LISTEN
tcp          0      0  *.143                  *.* LISTEN
tcp          0      0  127.0.0.1.8026         *.* LISTEN
tcp          0      0  *.22                   *.* LISTEN
tcp          0      0  *.80                   *.* LISTEN
Active Internet connections (including servers)
Proto   Recv-Q Send-Q  Local Address          Foreign Address (state)
udp          0      0  157.7.208.141.26124    157.7.236.66.123
udp          0      0  157.7.208.141.40444    202.234.64.222.123
udp          0      0  157.7.208.141.3649     157.7.235.92.123
udp          0      0  157.7.208.141.37895    157.7.154.134.123
udp          0      0  *.514                  *.*


without opensmtpd's help , i cannot climb mountains .

sendmail is too long novel
postfix  is poem
opensmtpd is like japanese HAIKU very short poem only three lines.


---------------------

regards tuyosi


--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

Reply via email to