On Sat, Nov 01, 2003 at 12:37:22PM -0700, Sancho2k.net Lists wrote: > Claudio Jeker wrote: > > >On Sat, Nov 01, 2003 at 01:55:58AM -0700, Sancho2k.net Lists wrote: > > > >>I have set up /var/qmail/control/rbllist as follows (tab separated): > >> > > > > > >Newer patches are no longer so picky about the tab separation. See > >QLDAPNEWS file. > > That I'd read. Is single-space separation fine for the fields in the file? >
Yes, that should do. > > > > > >>sbl.spamhaus.org reject 127.0.0.2 See http://www.spamhaus.org/SBL/ > >>relays.ordb.org addheader 127.0.0.2 See http://www.ordb.org/faq/ > >>list.dsbl.org addheader 127.0.0.2 See http://dsbl.org/main/ > >>bl.spamcop.net addheader 127.0.0.2 See http://spamcop.net/ > >>relays.ordb.org reject any See http://ordb.org/ > >>spamguard.leadmon.net addheader 127.0.0.2 Address is a dialup address > >> > >>And my smtpd tcp.cdb has the following rule compiled into it: > >> > >>127.:allow,RELAYCLIENT="",RBL="" > >> I'm a silly little rabbit. If you set RELAYCLIENT no RBL checks will be done. So you need to change your tcp.cdb file. > > > > > >>My expectation is that the connection would have been dropped, according > >>to my configuration. > >> > >>1. Is my configuration correct? > > > > > >Depends on the rbl list. If the have a default bad entry for 127.0.0.2 > >then yes you should either get a 550 error or a X-RBL header in the mail. > > In my example, where I have 6 RBLs in my rbllist, would my connection > from 127.0.0.2 be checked against all of them or only the first one to > return a response of either good or reject? > Normaly all 6 will be checked. The only exception is if a rbl tells you to reject the message then no more checks are done. > >>2. If it is correct, is my test valid? I don't know of any other way to > >>test the RBL setup other than connecting from IP 127.0.0.2. > >> > > > >Normaly it is the simplest to start qmail-smtp from your shell with the > >tcp-environ(5) needed values set. Tcp-environ(5) is a man file delivered > >with qmail. Normaly it is enough to set TCPLOCALIP, TCPREMOTEIP and RBL > >for testing. > > > > Could you provide a more detailed description of this? I am using the > qmail-conf setup for the smtpd service. So I placed 127.0.0.2 in > /service/smtpd/env/TCPREMOTEIP and performed svc -t on the service. I > expected this to set TCPREMOTEIP to 127.0.0.2 for every inbound > connection to the SMTP port but it appears I misunderstand how that > works as tcpserver still registered my connection as coming from the > real network address. > That won't work because tcpserver will overwrite the env var. Normaly the simplest is to do something like this: env TCPREMOTEIP=127.0.0.2 TCPLOCALIP=127.0.0.1 RBL= /var/qmail/bin/qmail-smtpd -- :wq Claudio
