On Mon, Jul 22, 2002 at 03:56:22PM -0400, CertaintyTech - Ed Henderson wrote: > I'm trying to convert to the Q-S standard of setting QMAILQUEUE from > tcp.smtp file. According to the Q-S website: > > # No Qmail-Scanner at all for mail from 127.0.0.1 > 127.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue > "
Huh? I'm sorry, but I do expect you to understand how Qmail works before using Qmail-Scanner! That is an EXAMPLE of how you can use it. As it says: /etc/tcpserver/smtp.rules # # No Qmail-Scanner at all for mail from 127.0.0.1 127.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue" See? "No Qmail-Scanner at all for mail from 127.0.0.1". If you do want Email sent via SMTP from 127.0.0.1 to be scanned, then don't use that line, or alter the QMAILQUEUE entry appropriately. > > > When I do this my outgoing mail (relayed from a dialup PC via SMTP) is no > longer scanned. Incoming does get scanned. If I change the QMAILQUEUE like You don't say what "a dialup PC" is. i.e. what IP address it is. From the tcpserver rules you sent, it would appear that only Email from 127.0.0.1 has Qmail-Scanner disabled - so I'd assume that means your dialup PC *is* being scanned, as I'd assume it isn't on the 127 network. How do you know it isn't being scanned? When you send a message from the PC, check your syslog/maillogs and qmail-queue.log to see what happens. Remember, if you have "--log-details" enabled, then there should be a log entry for each message processed - like: Jul 23 09:25:32 host qmail-scanner[21692]: Clear: 0.128712 4369 [EMAIL PROTECTED] [EMAIL PROTECTED] Re:_[Snort-users]_newbie-writing_rules_help <[EMAIL PROTECTED]> 1027373132.21695-0.trimble.co.nz:1493 Do you see those entries for incoming and not for outgoing? -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
