Bingo! That's it all right. Nice bit of sleuthing, Michael.

My apologies to CJ as he was on the right track. I missed the bit about your local lan addresses being whitelisted though.

Spamdyke's documentation at http://www.spamdyke.org/documentation/README.html#RELAYING says: "Authenticated and whitelisted connections will be allowed to relay."

So my question now is, why do you have your LAN whitelisted?

--
-Eric 'shubes'

On 01/11/2011 07:37 PM, Michael Colvin wrote:
Eric..  Check this thread out...  I think this may be pointing me in the
right direction...

http://osdir.com/ml/mail.qmail.simscan/2007-12/msg00029.html

The 2nd paragraph...  "Because relay client is set, simscan doesn’t run the
message through SpamAssassin (Since it's supposedly from a trusted source).

Could spamdyke be passing a value for "RELAYCLIENT"?  I've got the
192.168.100.0/24 (The private network my mail cluster is on) "Whitelisted"
in spamdyke...

Any place else that might be passing RELAYCLIENT?  It's not in my tcp.smtp
file.



Michael J. Colvin
NorCal Internet Services
www.norcalisp.com




-----Original Message-----
From: Eric Shubert [mailto:[email protected]]
Sent: Tuesday, January 11, 2011 11:06 AM
To: [email protected]
Subject: [qmailtoaster] Re: SpamAssassin not being invoked by SimContro

I'm at a loss Michael. I think I'd look closer into spamassassin at this
point. Can you invoke SA 'manually'?

On 01/11/2011 11:13 AM, Michael Colvin wrote:
Here you go Eric.  Both servers had identical outputs, other than one
being
installed the day after this one.  :-)

Name        : simscan-toaster              Relocations: (not
relocatable)
Version     : 1.4.0                             Vendor: (none)
Release     : 1.3.8                         Build Date: Fri 29 Oct 2010
02:28:37 AM PDT
Install Date: Fri 29 Oct 2010 02:30:25 AM PDT      Build Host:
mail-1.norcalisp.com
Group       : Networking/Other              Source RPM:
simscan-toaster-1.4.0-1.3.8.src.rpm
Size        : 113364                           License: GPL
Signature   : (none)
Packager    : Jake Vickers<[email protected]>
URL         : http://www.inter7.com/vpopmail
Summary     : Simscan for qmail-toaster
Description :

SimScan is a simplified scanner for qmail similar to qmail-scanner and
qscand.
It uses clamav, trophie, and/or spamassassin.  It also supports
attachment
blocking by extension.  Simscan is written entirely in C to ensure
maximum
speed.  There are several options to allow simscan to scan per domain,
and
reject spam mail.


                  Current settings
       ---------------------------------------
       user                  = clamav
       qmail directory       = /var/qmail
       work directory        = /var/qmail/simscan
       control directory     = /var/qmail/control
       qmail queue program   = /var/qmail/bin/qmail-queue
       clamdscan program     = /usr/bin/clamdscan
       clamav scan           = ON
       trophie scanning      = OFF
       attachement scan      = ON
       ripmime program       = /usr/bin/ripmime
       custom smtp reject    = ON
       drop message          = OFF
       regex scanner         = OFF
       quarantine processing = OFF
       domain based checking = ON
       add received header   = ON
       spam scanning         = ON
       spamc program         = /usr/bin/spamc
       spamc arguments       =
       spamc user            = OFF
       authenticated users scanned = OFF
       spam passthru         = OFF
       spam hits             = 40

                  Current simcontrol config
       ----------------------------------------------------------
       :clam=yes,spam=yes,spam_hits=12,attach=.mp3:.src:.bat:.pif


Michael J. Colvin
NorCal Internet Services
www.norcalisp.com



-----Original Message-----
From: Eric Shubert [mailto:[email protected]]
Sent: Tuesday, January 11, 2011 8:36 AM
To: [email protected]
Subject: [qmailtoaster] Re: SpamAssassin not being invoked by SimContro

I don't think so, Cecil. I have QMT hosts behind NAT routers, and SA
still scans. Authenticated submissions aren't scanned though.

Michael, can you post your
# rpm -qi simscan-toaster
(just double checking)

--
-Eric 'shubes'

On 01/11/2011 09:10 AM, Cecil Yother, Jr wrote:
Isn't there something about LAN addresses not being scanned?

Quoting "Michael J. Colvin"<[email protected]>:

OK. Tcp.smtp now looks like:



:allow,BADMIMETYPE="",SENDER_NOCHECK="1",BADLOADERTYPE="M",QMAILQUEUE="/va
r/

qmail/bin/simscan",NOP0FCHECK="1"

Header information is still the same:

Received: (qmail 28565 invoked by uid 1010); 11 Jan 2011 04:41:02 -
0800
Received: from 192.168.100.122 by mail.norcalisp.com (envelope-from
<[email protected]>, uid 1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.91.2/1082. spamassassin: 3.2.0. perlscan: 1.25-st-qms.
Clear:RC:1(192.168.100.122):.
Processed in 0.066093 secs); 11 Jan 2011 12:41:02 -0000
X-Antivirus-NorCalISP-Mail-From: [email protected] via
mail.norcalisp.com
X-Antivirus-NorCalISP: 1.25-st-qms (Clear:RC:1(192.168.100.122):.
Processed
in 0.066093 secs Process 28558)
Received: from unknown (HELO mail.norcalisp.com) (192.168.100.122)
by mail.norcalisp.com with SMTP; 11 Jan 2011 04:41:02 -0800
Received: (qmail 12610 invoked by uid 89); 11 Jan 2011 12:41:01 -0000
Received: by simscan 1.4.0 ppid: 12605, pid: 12606, t: 0.0623s
scanners: attach: 1.4.0 clamav: 0.96.3/m:53/d:12505
Received: from unknown (HELO mail-iw0-f177.google.com)
(209.85.214.177)
by mail.norcalisp.com with SMTP; 11 Jan 2011 12:41:01 -0000
Received: by iwn38 with SMTP id 38so21353335iwn.36
for<[email protected]>; Tue, 11 Jan 2011 04:40:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:received:date:message-id
:subject:from:to:content-type;
bh=4s2kmb0Iocy2ztenUiYdvwfIbdXrWGJeKE8RR03gj6M=;
b=AeiBKelfTf69Q/7TaoVAOqclbwmsAtr9RHblGmZZ5oL2ItVlbR3QbvwR2P0mijE3BM

KT9zmta/DCJW18pRpoKgLalMbWis+Uc7DBF1wPG+cbKidqL0aIctyYzASvBT93LYtepG
cVdflalC1w9g0xudt1bjHwJkg4FmtC0EkoZ9A=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
b=pFOBpl0EItTK62RMwoCVcr8N0UknO/Rwu9KA9n4puf1BIOTWDBWLhUqThVh1DXvTjY

jibiALvAE5jyGJCwqA2UgmqdcvNSeZQ7ylhYp5KLxYoa9CqyX0qohG9Xvn4M0g3dX/yJ
M1bLffv+FTJoqp9sKJ0ro4s/+EhvWQpm2cQGs=
MIME-Version: 1.0
Received: by 10.42.241.199 with SMTP id
lf7mr4139326icb.93.1294749629840;
Tue,
11 Jan 2011 04:40:29 -0800 (PST)
Received: by 10.42.230.5 with HTTP; Tue, 11 Jan 2011 04:40:29 -0800
(PST)
Date: Tue, 11 Jan 2011 04:40:29 -0800
Message-ID:
<[email protected]>
Subject: Testing
From: NorCal Internet<[email protected]>
To: Michael Colvin<[email protected]>
Content-Type: multipart/alternative;
boundary=20cf305496a9c27d9b04999163ea


No change on the "simscan" line... I still don't see anything in
qmlog
spamd, other than the "Startup" stuff that was there from my last
post...
In fact, there's nothing but what I posted last time, since the
server
hasn't restarted... There's been no log entries in spamd since
1/9/2011...

SpamAssassin is "On" in the default QMT, right? I mean, it's
obviously
installed on the system, and SimScan is running... It just seems like
something is missing, and it's on both servers... I know this is
going
to
end in one of those "Duh!" moments... :-)

Mike


-----Original Message-----
From: Eric Shubert [mailto:[email protected]]
Sent: Monday, January 10, 2011 8:39 AM
To: [email protected]
Subject: [qmailtoaster] Re: SpamAssassin not being invoked by
SimContro

On 01/09/2011 09:17 PM, Michael J. Colvin wrote:

Have you run
# qmailctl cdb
recently?

Several times, and even rebooted the whole server (Both of them) to
make
sure the new cdb files were loaded. The cdb file's date stamp is
being
updated when I run qmailctl cdb.

Again, what I think is the strangest part is, this is happening on
two
totally separate machines, both with basically "Stock" ISO installs
on
them... If it was happening to just one, I'd lean towards a config
error...
But with two of them, it's either something I did too both of them
(Possible, of course) or something else... And, like I said, I
haven't
changed much from the stock install... Just the rcpthosts,
smtproutes,
tcp.smtp (As posted) and I think that's about it..

(Shrug)...

Mike


Here's my tcp.smtp entry:


:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRO
NG



RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/cont
ro

l/domainkeys/%/private",NOP0FCHECK="1"

You appear to be missing NOP0FCHECK="1" in your configuration. IIRC,
you
really need that. I don't recall what happens w/out it, but I'd put
it
in and see if that fixes things.

--
-Eric 'shubes'


---------------------------------------------------------------------
--
-----

-----
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------
--
-----

-----
Please visit qmailtoaster.com for the latest news, updates, and
packages.

To unsubscribe, e-mail: qmailtoaster-list-
[email protected]
For additional commands, e-mail:
[email protected]




---------------------------------------------------------------------
--
----------

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------
--
----------

Please visit qmailtoaster.com for the latest news, updates, and
packages.

To unsubscribe, e-mail: qmailtoaster-list-
[email protected]
For additional commands, e-mail: qmailtoaster-list-
[email protected]






cj's
2318 Clement Ave
Alameda, CA 94501

http://www.yother.com

Check out the new Volvoclassified! http://www.volvoclassified.com

----------------------------------------------------------------------
--
---------

Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!



-----------------------------------------------------------------------
---
-------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
installations.
        If you need professional help with your setup, contact them
today!
-----------------------------------------------------------------------
---
-------
       Please visit qmailtoaster.com for the latest news, updates, and
packages.

        To unsubscribe, e-mail: qmailtoaster-list-
[email protected]
       For additional commands, e-mail: qmailtoaster-list-
[email protected]




------------------------------------------------------------------------
---------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
installations.
        If you need professional help with your setup, contact them
today!


--
-Eric 'shubes'


--------------------------------------------------------------------------
-------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and
installations.
       If you need professional help with your setup, contact them today!
--------------------------------------------------------------------------
-------
      Please visit qmailtoaster.com for the latest news, updates, and
packages.

       To unsubscribe, e-mail: qmailtoaster-list-
[email protected]
      For additional commands, e-mail: qmailtoaster-list-
[email protected]




---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and installations.
       If you need professional help with your setup, contact them today!



---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]


Reply via email to