On Sat, Nov 01, 2003 at 01:55:58AM -0700, Sancho2k.net Lists wrote:
I have set up /var/qmail/control/rbllist as follows (tab separated):
Newer patches are no longer so picky about the tab separation. See QLDAPNEWS file.
That I'd read. Is single-space separation fine for the fields in the file?
sbl.spamhaus.org reject 127.0.0.2 See http://www.spamhaus.org/SBL/ relays.ordb.org addheader 127.0.0.2 See http://www.ordb.org/faq/ list.dsbl.org addheader 127.0.0.2 See http://dsbl.org/main/ bl.spamcop.net addheader 127.0.0.2 See http://spamcop.net/ relays.ordb.org reject any See http://ordb.org/ spamguard.leadmon.net addheader 127.0.0.2 Address is a dialup address
And my smtpd tcp.cdb has the following rule compiled into it:
127.:allow,RELAYCLIENT="",RBL=""
I set an alias on my loopback interface lo0 for 127.0.0.2 and use telnet -b 127.0.0.1 <IPADDR> to connect to the smtp port on my qmail-ldap box. I send a test message and it is successfully delivered to the recipient, untagged in the header.
I think that should be -b 127.0.0.2. If the message gets delivered you know that the rbl file was parsed succesfully.
Yes, and that's what I *meant* to say I did in the email. My connection came from 127.0.0.2.
My expectation is that the connection would have been dropped, according to my configuration.
1. Is my configuration correct?
Depends on the rbl list. If the have a default bad entry for 127.0.0.2 then yes you should either get a 550 error or a X-RBL header in the mail.
In my example, where I have 6 RBLs in my rbllist, would my connection from 127.0.0.2 be checked against all of them or only the first one to return a response of either good or reject?
2. If it is correct, is my test valid? I don't know of any other way to test the RBL setup other than connecting from IP 127.0.0.2.
Normaly it is the simplest to start qmail-smtp from your shell with the tcp-environ(5) needed values set. Tcp-environ(5) is a man file delivered with qmail. Normaly it is enough to set TCPLOCALIP, TCPREMOTEIP and RBL for testing.
Could you provide a more detailed description of this? I am using the qmail-conf setup for the smtpd service. So I placed 127.0.0.2 in /service/smtpd/env/TCPREMOTEIP and performed svc -t on the service. I expected this to set TCPREMOTEIP to 127.0.0.2 for every inbound connection to the SMTP port but it appears I misunderstand how that works as tcpserver still registered my connection as coming from the real network address.
I tried again with the connection via telnet -b 127.0.0.2 and this is the resulting log snippet:
@400000003fa39d0e15b06fd4 tcpserver: status: 0/40
@400000003fa39dc236e571a4 tcpserver: status: 1/40
@400000003fa39dc23705ea24 tcpserver: pid 25369 from 127.0.0.2
@400000003fa39dc2371e8ad4 tcpserver: ok 25369 ldapmail.testmail.local:10.0.0.4:25 :127.0.0.2::48479
@400000003fa39de919f6fedc tcpserver: end 25369 status 0
@400000003fa39de91a07a494 tcpserver: status: 0/40
TIA
DS
