Thanks guys,
I done both two check and i found the records in my box. But there is
something that i want to ask.
I saw rblsmtpd records in my old smtp log files (@40000...) but not in
current. This show that not for all connection rbl check is done? Right ?
If this is right what is wrong ? Or how rblsmtpd working ?

On 12/11/06, Eric Shubes <[EMAIL PROTECTED]> wrote:

Erol KAHRAMAN wrote:
> hi,
> my blacklists file is as follow;
> -r sbl-xbl.spamhaus.org <http://sbl-xbl.spamhaus.org> -r bl.spamcop.net
> <http://bl.spamcop.net> -r relays.ordb.org <http://relays.ordb.org> -r
> dnsbl.antispam.or.id <http://dnsbl.antispam.or.id> -r opm.blitzed.org
> <http://opm.blitzed.org> -r list.dsbl.org <http://list.dsbl.org> -r
> cbl.abuseat.org <http://cbl.abuseat.org>
>
> and my smtp/run file is;
>
> #!/bin/sh
> QMAILDUID=`id -u vpopmail`
> NOFILESGID=`id -g vpopmail`
> MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
> BLACKLIST=`cat /var/qmail/control/blacklists`
> SMTPD="/var/qmail/bin/qmail-smtpd"
> TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
> RBLSMTPD="/usr/bin/rblsmtpd"
> HOSTNAME=`hostname`
> VCHKPW="/home/vpopmail/bin/vchkpw"
>
> exec /usr/bin/softlimit -m 12000000 \
>      /usr/bin/tcpserver -v -p -R -H -l $HOSTNAME -x $TCP_CDB -c
> "$MAXSMTPD" \
>      -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>      $RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1
>
> All on my qmail box is ok. But i am not sure does it check for spammers.
> When i run tcpdump i cannot see any traffic to these rbl servers. How
> can i test, does it realy check or not ?
> --
> Erol KAHRAMAN
> System Network Administrator

1) RBLs typically catch >50% of spam. You should see '451' messages in
smtp
log such as:
12-11 10:06:38 rblsmtpd: 72.77.239.170 pid 22049: 451
http://www.spamhaus.org/query/bl?ip=72.77.239.170
# grep rblsmtpd /var/log/qmail/smtp/current | tai64nlocal | less
should show them to you.

2) If you don't see any rblsmtpd messages,
# ps -ef | grep rblsmtpd
vpopmail 21880 23330  0 Dec10 ?        00:00:01 /usr/bin/tcpserver -v -R
-H
-l doris -x /etc/tcprules.d/tcp.smtp.cdb -c 100 -u 89 -g 89 0 smtp
/usr/bin/rblsmtpd -r sbl-xbl.spamhaus.org -r bl.spamcop.net -r
relays.ordb.org -r dnsbl.antispam.or.id -r opm.blitzed.org -r
list.dsbl.org
-r cbl.abuseat.org /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw
/bin/true
This shows what the exec command expanded into. You should see your
blacklists expanded there.

3) If #2 looks ok and you're not seeing log messages, you likely have a
DNS
problem.

Let us know.

Tip: Use qmlog command (part of qmailtoaster-plus package) for easy log
viewing.


--
-Eric 'shubes'

---------------------------------------------------------------------
     QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
Erol KAHRAMAN
System Network Administrator

Reply via email to