Re: remove entry from spamdb greylist

2013-08-14 Thread Boudewijn Dijkstra

Op Tue, 13 Aug 2013 17:49:51 +0200 schreef ML mail mlnos...@yahoo.com:
I am using spamd in greylisting mode and would like to delete the  
following entry:


GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|no_reply@sender|recipient@domain|1376398715|1376400232|1376413115|4|0

I tried the following command:

spamdb -d 207.126.144.121


Unfortunately it does not remove the entry as it is still there. Any  
ideas what could be wrong?


An IP address can only be used as a key for WHITE and TRAPPED entries. The
spamdb(8) utility was not designed to remove GREY entries, but if you are
clever, you might be able to use it for this purpose.

Anyway, the important question is: what are you trying to accomplish?


--
Gemaakt met Opera's revolutionaire e-mailprogramma:
http://www.opera.com/mail/
(Remove the obvious prefix to reply privately.)



Re: remove entry from spamdb greylist

2013-08-14 Thread James Griffin
!-- On Tue 13.Aug'13 at 16:49:51 BST, ML mail (mlnos...@yahoo.com), wrote: 
 Hello,
 
 I am using spamd in greylisting mode and would like to delete the following 
 entry:
 
 GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|no_reply@sender|recipient@domain|1376398715|1376400232|1376413115|4|0
 
 I tried the following command:
 
 spamdb -d 207.126.144.121
 
 
 Unfortunately it does not remove the entry as it is still there. Any ideas 
 what could be wrong?
 
 Regards,
 M.L.
 

I don't think anything is wrong. It will be removed but might not show
straight away. man 8 spamdb explains very clearly. 

I personally use the -t switch as well as -d. spamdb -t -d ... so the
address is trapped. I then usually add it to my blacklist database and/or
my spam anchor using pfctl

-- 


James Griffin: jmz at kontrol.kode5.net 

A4B9 E875 A18C 6E11 F46D  B788 BEE6 1251 1D31 DC38



Re: remove entry from spamdb greylist

2013-08-14 Thread ML mail
This mail server has been somehow wrongly marked as grey and would stay stuck
like in this state not allowing mails flowing in. Somehow after 3 attempts it
should have whitelisted this IP so it didn't. What I now did is to manually
add this IP my PF spamd whitelist. The final goal being simply to allow mail
coming in from this mail server.

Regards,
M.L.

 From: Boudewijn Dijkstra
sp4mtr4p.boudew...@indes.com
To: misc misc@openbsd.org 
Sent: Wednesday,
August 14, 2013 12:39 PM
Subject: Re: remove entry from spamdb greylist
 

Op
Tue, 13 Aug 2013 17:49:51 +0200 schreef ML mail mlnos...@yahoo.com:
 I am
using spamd in greylisting mode and would like to delete the  
 following
entry:


GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|no_reply@sender|recipient@
domain|1376398715|1376400232|1376413115|4|0

 I tried the following
command:

 spamdb -d 207.126.144.121


 Unfortunately it does not remove
the entry as it is still there. Any  
 ideas what could be wrong?

An IP
address can only be used as a key for WHITE and TRAPPED entries. The
spamdb(8)
utility was not designed to remove GREY entries, but if you are
clever, you
might be able to use it for this purpose.

Anyway, the important question is:
what are you trying to accomplish?


-- 
Gemaakt met Opera's revolutionaire
e-mailprogramma:
http://www.opera.com/mail/
(Remove the obvious prefix to
reply privately.)



Re: remove entry from spamdb greylist

2013-08-14 Thread Peter N. M. Hansteen
On Wed, Aug 14, 2013 at 06:38:50AM -0700, ML mail wrote:
 This mail server has been somehow wrongly marked as grey and would stay stuck
 like in this state not allowing mails flowing in. Somehow after 3 attempts it
 should have whitelisted this IP so it didn't. What I now did is to manually
 add this IP my PF spamd whitelist. The final goal being simply to allow mail
 coming in from this mail server.

spamdb -a 207.126.144.121 should set it to state WHITE, and the GREY entry 
(which will be overridden by the WHITE) will expire sooner or later.

If it doesn't behave that way, I'd think reporting a bug would be in order, 
if you have sufficient logging going on at least.

- P 

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: remove entry from spamdb greylist

2013-08-14 Thread Boudewijn Dijkstra
If that PF table is spamd-white, then it will get reset when you run  
spamd-setup(8) or reboot. Maybe a better way is to manually add this IP to  
the spamdb whitelist:

spamdb -a 207.126.144.121
In this case the grey entry will be ignored and stay in the database until  
it expires.


Or, even better, regularly add/update all OBSMTP addresses in your  
whitelist via SPF. Search the archives for people who made scripts for  
this kind of thing.


Greylisting is great, but some mail delivery networks need a little help  
in the form of manual whitelisting of their netblocks.



Op Wed, 14 Aug 2013 15:38:50 +0200 schreef ML mail mlnos...@yahoo.com:
This mail server has been somehow wrongly marked as grey and would stay  
stuck
like in this state not allowing mails flowing in. Somehow after 3  
attempts it
should have whitelisted this IP so it didn't. What I now did is to  
manually
add this IP my PF spamd whitelist. The final goal being simply to allow  
mail coming in from this mail server.


Regards,
M.L.

 From: Boudewijn Dijkstra
sp4mtr4p.boudew...@indes.com
To: misc misc@openbsd.org
Sent: Wednesday,
August 14, 2013 12:39 PM
Subject: Re: remove entry from spamdb greylist

Op
Tue, 13 Aug 2013 17:49:51 +0200 schreef ML mail mlnos...@yahoo.com:

I am

using spamd in greylisting mode and would like to delete the

following entry:



GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|no_reply@sender|recipient@
domain|1376398715|1376400232|1376413115|4|0


I tried the following command:

spamdb -d 207.126.144.121


Unfortunately it does not remove

the entry as it is still there. Any

ideas what could be wrong?


An IP
address can only be used as a key for WHITE and TRAPPED entries. The
spamdb(8)
utility was not designed to remove GREY entries, but if you are
clever, you might be able to use it for this purpose.

Anyway, the important question is:
what are you trying to accomplish?





--
Gemaakt met Opera's revolutionaire e-mailprogramma:  
http://www.opera.com/mail/

(Remove the obvious prefix to reply privately.)



Re: remove entry from spamdb greylist

2013-08-14 Thread ML mail
Dear Peter,

Thanks for your input too! Actually yesterday I have also tried afterwards to 
do a spamdb -a and as I didn't see any immediate effect (IP still listed 
under GREY), I simply assumed that it didn't work. From your mail I understand 
that it stays for a while as GREY until it expires, so maybe I wasn't patient 
enough. Anyhow today as I checked this IP is listed under WHITE so it looks 
like it finally worked as I wanted.
Regards,
M.L.




 From: Peter N. M. Hansteen pe...@bsdly.net
To: ML mail mlnos...@yahoo.com 
Cc: misc misc@openbsd.org 
Sent: Wednesday, August 14, 2013 4:07 PM
Subject: Re: remove entry from spamdb greylist
 

On Wed, Aug 14, 2013 at 06:38:50AM -0700, ML mail wrote:
 This mail server has been somehow wrongly marked as grey and would stay stuck
 like in this state not allowing mails flowing in. Somehow after 3 attempts it
 should have whitelisted this IP so it didn't. What I now did is to manually
 add this IP my PF spamd whitelist. The final goal being simply to allow mail
 coming in from this mail server.

spamdb -a 207.126.144.121 should set it to state WHITE, and the GREY entry 
(which will be overridden by the WHITE) will expire sooner or later.

If it doesn't behave that way, I'd think reporting a bug would be in order, 
if you have sufficient logging going on at least.

- P 

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



remove entry from spamdb greylist

2013-08-13 Thread ML mail
Hello,

I am using spamd in greylisting mode and would like to delete the following 
entry:

GREY|207.126.144.121|eu1sys200aog106.obsmtp.com|no_reply@sender|recipient@domain|1376398715|1376400232|1376413115|4|0

I tried the following command:

spamdb -d 207.126.144.121


Unfortunately it does not remove the entry as it is still there. Any ideas what 
could be wrong?

Regards,
M.L.