I agree with Michael. Other observations:
Do you have a caching nameserver installed on your toaster? You really
should, as this help to lighten the DNS load that comes with using
spamdyke (small price to pay). The easiest way to install a caching
nameserver is:
# yum install bind-chroot caching-nameserver
on CentOS (other distros may vary). Then be sure that the first
nameserver line in your /etc/resolv.conf file is:
nameserver 127.0.0.1
The stock /var/qmail/control/blacklists file is ineffective when
spamdyke is used. Spamdyke handles this with the dns-blacklist-entry=
parameters.
As Michael said, the reject-* parameters are very effective. I highly
recommend using them. In addition, you should use reject-ip-in-cc-dns as
long as you don't have much email coming from outside the continental US.
Michael Colvin wrote:
I’m not sure I see what your problem is… Your post shows that a message
from, what I would guess is a spam address, being blocked by a blacklist
entry. Isn’t that what you want?
The address that shows a “DENIED_RBL_MATCH from” certainly looks like
something you’d want blocked. That’s what SpamDyke does, and it does it
very well. The “unknown” portions are indicative of the IP’s not having
any rDNS entries.
You’re config also shows items that are very effective at blocking spam
as being remarked out…(reject-missing-sender-mx and
reject-unresolvable-rdns for example).
I think you’re confusing these log entries with errors, when in fact,
they are a good thing…Unless I’m missing something.
**Michael J. Colvin**
**NorCal Internet Services**
**//www.norcalisp.com// <http://www.norcalisp.com/>**
<http://www.norcalisp.com/>
------------------------------------------------------------------------
*From:* nicole thomson [mailto:[email protected]]
*Sent:* Monday, November 30, 2009 4:29 AM
*To:* [email protected]
*Subject:* RE: [qmailtoaster] Blocking mail-id's which doesnt exist in
database
when i use spamhaus.org in rbl, i used to get
DENIED_RBL_MATCH from: [email protected] to: [email protected]
origin_ip: 125.146.164.245 origin_rdns: (unknown) auth: (unknown)
but after commenting all those entries, now atleast mails are flowing
thru, but still i am counting the bomb to explode.
#dns-blacklist-entry=zombie.dnsbl.sorbs.net
#dns-blacklist-entry=dul.dnsbl.sorbs.net
#dns-blacklist-entry=bogons.cymru.com
#dns-blacklist-entry=zen.spamhaus.org
#dns-blacklist-entry=bl.spamcop.net
Can someone out there help me
--Nicole
My spamdyke.conf
#dns-blacklist-entry=zombie.dnsbl.sorbs.net
#dns-blacklist-entry=dul.dnsbl.sorbs.net
#dns-blacklist-entry=bogons.cymru.com
#dns-blacklist-entry=zen.spamhaus.org
#dns-blacklist-entry=bl.spamcop.net
graylist-dir=/var/spamdyke/graylist
graylist-exception-rdns-entry=/etc/spamdyke/graylist-exception-rdns-file
graylist-level=none
graylist-max-secs=2678400
graylist-min-secs=180
greeting-delay-secs=5
idle-timeout-secs=600
ip-blacklist-file=/etc/spamdyke/blacklist_ip
ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords
ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
ip-whitelist-file=/etc/spamdyke/whitelist_ip
access-file=/etc/spamdyke/access-file
local-domains-file=/var/qmail/control/rcpthosts
log-level=info
log-target=stderr
max-recipients=50
#policy-url=http://my.policy.explanation.url/
rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
recipient-whitelist-file=/etc/spamdyke/whitelist_recipients
#reject-empty-rdns
##reject-ip-in-cc-rdns
#reject-missing-sender-mx
#reject-unresolvable-rdns
sender-blacklist-file=/etc/spamdyke/blacklist_senders
sender-whitelist-file=/etc/spamdyke/whitelist_senders
tls-certificate-file=/var/qmail/control/servercert.pem
my blacklists
more blacklists
-r sbl.spamhaus.org \
i have configured the /etc/resolv.conf with my ISP's dns provider, i am
not running any dns server.
------------------------------------------------------------------------
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
