Jim Shupert wrote:
Jake Vickers wrote:
Jim Shupert wrote:
Eric Shubert wrote:
Jim Shupert wrote:
could someone remind me how I might look in the logs to see any
and all references to [email protected]
here is my situation a user says she is not getting email from (
let us call them ) [email protected]
so i wish to see if billy mail hits my server and is ???? rejected
or what not etc.
thanks!
jS
Providing you have QTP installed (and you really should),
# qmlog -lc "bi...@billybob\.com" smtp
Cool, eh?
Most Cool -- Thanks!
-- i wish i had a better idea on how to understand the log
might you tell me what relevance the below has - what it means ? why
the reject?
< snip
10-26 08:36:31 CHKUSER accepted sender: from <[email protected]::>
remote <mail-out2.fuse.net:unknown:216.68.8.171>
rcpt <> : sender accepted
10-26 08:36:31 qmail-smtpd: spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:[email protected]
10-26 08:36:36 tcpserver: end 3876 status 0
10-26 08:36:36 tcpserver: status: 0/100
10-26 08:36:39 tcpserver: status: 1/100
10-26 08:36:39 tcpserver: pid 3877 from 217.23.9.164
10-26 08:36:39 tcpserver: ok 3877
sifter.pps-inc.com:192.168.200.222:25 :217.23.9.164::1803
10-26 08:36:39 tcpserver: status: 2/100
10-26 08:36:39 tcpserver: pid 3878 from 216.37.105.169
10-26 08:36:39 tcpserver: ok 3878
sifter.pps-inc.com:192.168.200.222:25 :216.37.105.169::33074
10-26 08:36:39 rblsmtpd: 216.37.105.169 pid 3878: 451
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL77346
</snip
spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:[email protected]
and i did a spf test w http://www.kitterman.com/spf/validate.html
Found v=spf1 record for billybob.com
v=spf1 a mx a:ecsubs.com include:cust-spf.exacttarget.com -all
my bottom line is it looks like it was accepted [ accepted sender:
from <[email protected]::> ]
so maybe I should ask my user to look in her spam folder?
any informed insights welcomed -- i am learning ....THANKS!
( and I have changed the name & domain , of course )
It accepted it because the sender was okay, but the SPF record did
not pass. Check your /var/qmail/control/spfbehavior file. It's
probably at the default of 3 which is okay for most, but you may need
to lower it to 2 or 1 to get that particular email to work. There's
more info on the wiki.
so more info on the wiki is
http://wiki.qmailtoaster.com/index.php/QMT-ISO_Manual_Guide
so I just do the below --( so do 2 things
Configure Domain's SPF
You can add SPF record for your domain, so other mailserver can
recognize which email was sent using your mailserver. Visit SPF
<http://wiki.qmailtoaster.com/index.php/SPF> page for detail info
about it.
For your information, there are some admin that may provide SPF record
for their domain is wrong syntax. Or DNS server that provide SPF
record down. So it may reject emails to your server.
thing 1
What I do is change the value into 1
# vi /var/qmail/control/spfbehavior
1
# qmailctl restart
Then add these SA rules, so it can prevent bad emails
thing 2
# vi /etc/mail/spamassassin/local.cf
# add score to softfail SPF
header spf_softfail Received-SPF =~ /\bsoftfail\b/
score spf_softfail 1.0
# add score to fail SPF
header spf_fail Received-SPF =~ /\bfail\b/
score spf_fail 2.0
# qmail-spam restart
and would it be true that i can just cut & paste the above ?
thanks!
That will work, yes.
Guess we should launch a group to update/organize the wiki a little. Any
volunteers?
