[qmailtoaster] SPAM / Relayclient issues
Hi all, Recently seen a spurt in spam going out from my server. What I have seen is that in such cases, this is the log. CHKUSER relaying rcpt: from xx...@sail-steel.com:rmfpwr: remote k.st:unknown:183.5.232.68 rcpt yangjuan...@qq.com : client allowed to relay Now, in my tcp.smtp, this client is not allowed to relay. So am stumped as to how this client is allowed to relay ? A small investigation showed up that the To address in such mails is coming as below : simscan:[5907]:RELAYCLIENT:1.8346s:-:183.5.232.68:xx...@sail-steel.com:905690...@qq.com,1047623...@qq.com,z...@job20.com,285090...@qq.com,cq445_...@qq.com,huajing-2...@qq.com,4559...@qq.com There is a : in the to line. Is that causing the problem ? My server is accepting this, trying to deliver, failing, and bouncing to users in my domain ... Thanx Anand - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] SPAM / Relayclient issues
On 19/05/2011 3:38 PM, K Anand wrote: Hi all, Recently seen a spurt in spam going out from my server. What I have seen is that in such cases, this is the log. CHKUSER relaying rcpt: from xx...@sail-steel.com:rmfpwr: remote k.st:unknown:183.5.232.68 rcpt yangjuan...@qq.com : client allowed to relay Now, in my tcp.smtp, this client is not allowed to relay. So am stumped as to how this client is allowed to relay ? A small investigation showed up that the To address in such mails is coming as below : simscan:[5907]:RELAYCLIENT:1.8346s:-:183.5.232.68:xx...@sail-steel.com:905690...@qq.com,1047623...@qq.com,z...@job20.com,285090...@qq.com,cq445_...@qq.com,huajing-2...@qq.com,4559...@qq.com There is a : in the to line. Is that causing the problem ? My server is accepting this, trying to deliver, failing, and bouncing to users in my domain ... Figured out the problem ...SMTP AUTH ...the guy guessed the password and got authenticated. Anand - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] patch reqd in QMT
K Anand wrote to SA List : I have whitelist_from [EMAIL PROTECTED] in my conf. As per the docs, they say that whitelist_from will act on Envelope-Sender Resent-Sender X-Envelope-From From Reply from SA list. In addition, the ``envelope sender'' data, taken from the SMTP envelope data where this is available, is looked up. See |envelope_sender_header|. So it should also, by default, match the Return-Path header. *HOWEVER* that assumes the header is present at the time of scanning. Normally this header is not present at the MTA layer. It's a delivery agent thing. Many MTA layer SA integration tools create a fake return-path header and then remove it. SimScan (which you appear to use) doesn't do this, at least, the last person who was asking about the same basic problem (although it was relating to SPF, it still was failing due to lack of envelope information at scan time). You might be able to use the same solution he did, which patches qmail to add the envelope-from information to your Received: headers. See also: http://wiki.apache.org/spamassassin/QmailSpfPatch Can this be done into QMT ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] [Fwd: Re: what does whitelist_from act on] X-Post from SA list
I seem to be having lots of problems lately This is a X-Post from SA list . K Anand wrote: I have whitelist_from [EMAIL PROTECTED] in my conf. As per the docs, they say that whitelist_from will act on Envelope-Sender Resent-Sender X-Envelope-From From Reply from SA list. In addition, the ``envelope sender'' data, taken from the SMTP envelope data where this is available, is looked up. See |envelope_sender_header|. So it should also, by default, match the Return-Path header. *HOWEVER* that assumes the header is present at the time of scanning. Normally this header is not present at the MTA layer. It's a delivery agent thing. Many MTA layer SA integration tools create a fake return-path header and then remove it. SimScan (which you appear to use) doesn't do this, at least, the last person who was asking about the same basic problem (although it was relating to SPF, it still was failing due to lack of envelope information at scan time). You might be able to use the same solution he did, which patches qmail to add the envelope-from information to your Received: headers. See also: http://wiki.apache.org/spamassassin/QmailSpfPatch qmt already comes with the SPF patch..So what's missing ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] SOLVED [Fwd: Re: Skip SA checks for mails from SA list] X-post from SA list
K Anand wrote: Hi all, I have a problem. In SA, I want to use the whitelist_from_rcvd. However, I was not able to get it working. When I posted my rule on the SA list, someone else was able to get it working. So when I posted my headers on the SA list, this is the reply that came. -- This is what I get [...] I think the problem has something to do with this line : Received: from unknown (HELO mail.apache.org) (140.211.11.2) configure your smtp server to add DNS data to Received: line. *list_from_rcvd doesn't work without list (although it could be worth adding IP or CIDR check in such cases) -- So how do I do this ? Anand I managed to solve this... in the run file of smtp, I had changed the -r and -h to -R and -H. changed them back and am getting these info. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] [Fwd: Re: Skip SA checks for mails from SA list] X-post from SA list
Hi all, I have a problem. In SA, I want to use the whitelist_from_rcvd. However, I was not able to get it working. When I posted my rule on the SA list, someone else was able to get it working. So when I posted my headers on the SA list, this is the reply that came. -- This is what I get [...] I think the problem has something to do with this line : Received: from unknown (HELO mail.apache.org) (140.211.11.2) configure your smtp server to add DNS data to Received: line. *list_from_rcvd doesn't work without list (although it could be worth adding IP or CIDR check in such cases) -- So how do I do this ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] this user has no $HOME/Maildir
Istvan Köpe wrote: I rebooted the server several times it didn't help. mysqlcheck vpopmail gives me mysqlcheck: Got error: 1045: Access denied for user 'root'@'localhost' (using password: NO) when trying to connect But I don't know where this localhost comes from. There is nothing called localhost on my server. I renamed everything, of course before installing the server. I. Just try this : mysql -u root -p it should ask you for the root password. try logging into mysql and check the vpopmail database. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] this user has no $HOME/Maildir
Istvan Köpe wrote: Can you be more specific? I don't know mysql at all. I. log into your server. At the command prompt, type as below. mysql -u root -p It should prompt you to enter the root password for mysql. enter it. If it is correct, you should get a mysql prompt. Anand K Anand wrote: Istvan Köpe wrote: I rebooted the server several times it didn't help. mysqlcheck vpopmail gives me mysqlcheck: Got error: 1045: Access denied for user 'root'@'localhost' (using password: NO) when trying to connect But I don't know where this localhost comes from. There is nothing called localhost on my server. I renamed everything, of course before installing the server. I. Just try this : mysql -u root -p it should ask you for the root password. try logging into mysql and check the vpopmail database. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] this user has no $HOME/Maildir
Istvan Köpe wrote: Can you be more specific? I don't know mysql at all. I. Istvan Köpe wrote: I rebooted the server several times it didn't help. mysqlcheck vpopmail gives me mysqlcheck: Got error: 1045: Access denied for user 'root'@'localhost' (using password: NO) when trying to connect But I don't know where this localhost comes from. There is nothing called localhost on my server. I renamed everything, of course before installing the server. I. you should actually use mysqlcheck vpopmail -p The -p specifies that you need to give a password for the command to work . The error that you are getting is because you have a password set and are not calling mysql with the -p option. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] How to shut SMTP-AUTH
I would like to disable SMTP-AUTH as I found out that someone had used this to send out spams from my server. My server needs to send out only mails from internal network to outside..So, I have setup RELAYCLIENT in my tcp.smtp file...However, I need to stop my server from accepting AUTH command. How can I do that ? Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Domain rejection
- Original Message - From: Tim Mancour [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, September 14, 2007 11:12 PM Subject: RE: [qmailtoaster] Domain rejection If you no longer wish to receive email from the domain foobar.com, as an example, then just add the following line to your control/badmailfrom file: foobar\.com Can u please tell why the \ after foobar ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] POP3 Issue
- Original Message - From: Eric Pierce [EMAIL PROTECTED] In case anyone was wondering, I ended up configuring pop3 not to look up hostnames and it started working again. Thanks for the quick responses -- the strace tip gave me the clue I needed to realize it was taking forever on reverse DNS lookups..and after comparing how tcpserver was configured for pop3 vs. pop3-ssl and making the changes, I have a fully functioning server again. Regards, Eric Hi, I suddenly got exactly this problem today morning. It had happened some time earlier also but at that time, it became ok on its own. Today, the problem is still there. So I tried as you suggested, ie I gave -H in the pop3 run file. But still I have the problem. In my case, there seems to be aproblem with mysql connections from remote machines to this server also. Apparently it is a DNS issue. What exactly did u change ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] How to disable certain services
Hi all, I want to disable certain services in my toaster like POP3-SSL...How can I do that ?? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] How to disable certain services
- Original Message - From: Philip [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, February 13, 2007 4:39 PM Subject: Re: [qmailtoaster] How to disable certain services Hello stop qmail delete the services rm -rf /var/qmail/supervise/name_of_service restart qmail you need to do it each time you re-install qmail-toaster-1.03-*.rpm Apart from deleting, is there any other way ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] How to disable certain services
Thanx for the replies guys. Anand - Original Message - From: Buzzz [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, February 13, 2007 4:46 PM Subject: RE: [qmailtoaster] How to disable certain services Apart from deleting, is there any other way ? Yep, you can do it temporarily: svc -d /var/qmail/supervise/NAMEOFSERVICE This will disable NAMEOFSERVICE temporarily You can bring it up again with: svc -u /var/qmail/supervise/NAMEOFSERVICE See http://cr.yp.to/daemontools/svc.html The standard daemontools way is to create a symlink under the $service_dir pointing to the service dir . In this way you don't need to delete ALL the service dir , just the symlink , so each time you want to re-enable the service all you need to do is to remake the symlink to it . Toaster seems not to follow this standard way . Bye, Davide - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 PM - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] SMTP Connection Throttling by IP address
There's also a tcpserver-limits patch. This will allow you to limit the number of simultaneous connections from IPs...I found it to be very useful. I had also seen the iptables way of doing it . But I thought that tcpserver patch was better since it will limit the actual simultaneous connections. You can't achieve this with iptables. In fact, I had posted this on this list earlier : - Hi all, I was wanting to limit the number of concurrent connections from a particular IP...I ended up searching a lot and came up on the tcpserver limit patch http://linux.voyager.hr/ucspi-tcp/ I managed to patch it into toaster presently on my test box. My testing shows that it seems to be working properly...I think it is a very useful patch to limit the connections based on IP. Any reason why this was not included in toaster. Will it be included in new toasters ? --- Anand - Original Message - From: Dairenn Lombard [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, December 01, 2006 12:43 AM Subject: [qmailtoaster] SMTP Connection Throttling by IP address Hello, I'd like to know if there is a way to limit the rate of SMTP connections that can be established by any one IP address at a time to qmail? A message might be refused because spamhaus has stated it's coming from the IP address of a known spammer, but qmail still has to burn one of its available connections as set by /var/qmail/control/concurrencyremote, and, spamd still has to start, which takes up 28MB of RAM. We added it up, and the amount of memory our server has limits the most reasonable number of simultaneous instances of spamd (and then concurrencyremote connections) is 72. This seems to be fine under most circumstances (with the average SMTP connections simultaneously occuring being around 40). But sometimes this shoots up to 200, causing timeouts on the part of customers trying to send out e-mail. So we want to make it so that all 200 connections are basically coming from 200 separate and distinct customers before investing more memory in the mail server. Thanks. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] tcpserver limit patch
Hi all, I was wanting to limit the number of concurrent connections from a particular IP...I ended up searching a lot and came up on the tcpserver limit patch http://linux.voyager.hr/ucspi-tcp/ I managed to patch it into toaster presently on my test box. My testing shows that it seems to be working properly...I think it is a very useful patch to limit the connections based on IP. Any reason why this was not included in toaster. Will it be included in new toasters ? My tcpserver is ucspi-tcp-toaster-0.88-1.2.9.src.rpm. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Catchall
Hi all, Could someone please elaborate what the Catchall option does ?? Recently I had changed catchall to deleted. I think from that time, chkuser was not rejecting mails to non existant users ... Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Catchall
So what happens if Catchall is set to bounced...It seems that when it is set ot bounced, it bounces the mails. But when set to deleted, it seems to be accepting mails.. The reason why I set it to deleted was that I was getting double bounces to the postmaster account. I basically want to stop that. Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, September 27, 2006 5:06 PM Subject: Re: [qmailtoaster] Catchall K Anand wrote: Hi all, Could someone please elaborate what the Catchall option does ?? Recently I had changed catchall to deleted. I think from that time, chkuser was not rejecting mails to non existant users ... The catchall account gets all the emails that are not destined for a valid user. I could send an email to a fake address at your domain, and the catchall would receive it. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Catchall
OK ..thanx for the confirmation...So how do I stop these double bounces from filling up the mailbox of postmaster ?? Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, September 27, 2006 5:17 PM Subject: Re: [qmailtoaster] Catchall K Anand wrote: So what happens if Catchall is set to bounced...It seems that when it is set ot bounced, it bounces the mails. But when set to deleted, it seems to be accepting mails.. The reason why I set it to deleted was that I was getting double bounces to the postmaster account. I basically want to stop that. I believe that delete is for those who do not want to send confirmations back to spammers and what not. It takes the email, but then deletes it, sending no message back to the sender. Bounce on the other hand, does send a message back to the sender, letting them know the email address was invalid (read: sorry spammer, that was not a real email, try again!). Unless the functionality has change since last time I looked at it And that was a while ago. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Catchall
Hi, I have not set any account as catchall...From the qmailadin, I used the Set Catchall bounced option. I'm running qmail-toaster-1.03-1.2.10 with qmailadmin-toaster-1.2.9-1.2.11. Should I mark any account as a catchall account or by default it is set to some account ?? I just saw that the postmaster account was not set as a catchall account. Anand - Original Message - From: Eric Shubes [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, September 27, 2006 8:45 PM Subject: Re: [qmailtoaster] Catchall K Anand wrote: OK ..thanx for the confirmation...So how do I stop these double bounces from filling up the mailbox of postmaster ?? Anand Don't bounce catchall email. IOW, set your catchall (postmaster or other) account to standard routing. BTW, how did you set your catchall account to bounce? I don't see such an option. What version of toaster are you running? -- -Eric 'shubes' - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] surbl not kickin in
- Original Message - From: Eric Shubes [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, August 10, 2006 11:20 AM Subject: Re: [qmailtoaster] surbl not kickin in Ok, thanks for the clarification. I'm still new to this BL stuff. Can you (or someone) please explain RBL, URIBL, and SURBL? (or point to a link that does) RBL Realtime blacklists --- work on the IP address of the sender..If it is there on any RBL, it should be considered as SPAM. SURBL -- Spam URI Realtime Black lists -- work on URLs present in the body of the mails...If the URL is listed on SURBL sites, it should be considered as SPAM...URIBL is just another name for it... Heh, I just noticed something else. In my SA book (O'Reilly, Alan Schwartz), it says that the URIDNSBL plugin is loaded by 25_uribl.cf (SA3.0). I don't see it (25_uribl.cf tests to see if URIDNSBL is loaded though). Does anyone know where/if this is loaded in the default SA distribution? Atleast on the default toaster, it does not get loaded...And I think its a good idea to load it and enable it by default.. 'Cos its very effective in blocking a lot of spams which would otherwise flow in...I used to write a lot of custom rules to try and stop these..Then I saw on the SA mailing list about SURBLs and tried it out on my installation. VoilaI need not have any custom rules anymore.. Lot of new users find it very difficult to figure out that there are somethings called SURBLsOf course, if you are an admin, I guess its your job to find these and get them working..But it will make the admins life a lot easier if by default, its there Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] surbl not kickin in
I hope to update the wiki today, including some other aspects that Anand pointed out yesterday. ---Eric 'shubes' Saw your updated wiki again...As I had said earlier, and as was pointed by you in your other posting, the skip_rbl_checks 1 need not be changed to 0... This has effect only on RBL tests and not on URIBL tests..So let the user decide if he has to do RBL tests in SA or notFor SURBL to work, it can be what is the default in QMT .. BTW, great wiki entry...Keep up the good work...We need more people like you to help us use our toasters to their fullest potential. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Re: Hello and need help on Simscan Spamassassin
AFAIK, simscan will not send mails to SA for Trusted UsersThis is the default on simscan. Trusted Users are identified by the RELAYCLIENT env variable that is set in tcp.smtp file. If you want to change this functionality you will have to build simscan rpm manually. For this, install the simscan source package. It will generally get installed in /usr/src/...dir. goto the spec file which should be present in the SPEC dir. In the spec file, you will see a command called configure . This has some options that are being passed to it. Add this configuration also. --enable-spam-auth-user=y|n Turn on spam scanning for authenticated users (default no). Then save the spec file. Then rebuild the binary rpm. That should do it. Anand - Original Message - From: fuzzy [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, August 08, 2006 11:28 AM Subject: Re: [qmailtoaster] Re: Hello and need help on Simscan Spamassassin Isianto Istiadi wrote: Forgive me if I'm wrong, but isn't it the header comes from qmailtoaster.com and gmail ? I don't use gspe to write this email, I'm using gmail webmail to write and read email. GSPE email is a local email server where it get email from another provider using fetchmail. The problem is the provider email server doesn't have spam control, so I need to do the spam control. As gspe is a local email server, each internal staff also need to send email to another internal staff, and again contain alot of spams. Thanks Isianto forgive me, i did not correctly guess your setup. dansguardian? so is this computer is an edge-device protecting your private lan while controlling web access, web-proxying and such? maybe the problem is related to the proxying line in the header. i haven't seen that before, but that may not mean anything. what does your host file look like? more than one nic? the problem may lie in there and the relayclient statement in tcp.smtp file. obviously i am of no use, maybe someone else here can help. i was just over at the inter7 site reading up on simscan...apparently, i have more to learn before offering advice. so, silently i slip away. fuzz - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] SpamAssassin not running using SURBL
I just saw your wiki...you need not comment out the line to skip rbl checks..That has nothing to do with SURBL. Also, you need not put the urirhssub entries in user_prefs.cf...These are already there in the /usr/share/spamassassin dir... You also forgot to mention that URIDNSBL module has to be loaded. I have already posted regarding this on the list previously. Anand - Original Message - From: Jamie Thom [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, August 08, 2006 5:23 PM Subject: Re: [qmailtoaster] SpamAssassin not running using SURBL That did it Fuzz! Thank you very much! Changing /var/qmail/supervise/spamd/run to be: exec /usr/bin/spamd -x -u vpopmail -s stderr 21 Has done the trick! Serves me right for not rtfm, if i'd man spamd I would have spotted that. I've put the details of how to do SURBL on the wiki at http://wiki.qmailtoaster.com/index.php/SURBL Cheers, Jamie On 08/08/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: supervise script for sa uses -L option using local checks (only)try finding and editing that, taking out the -L option. restart spamd, and try your test again. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] SpamAssassin not running using SURBL
- Original Message - From: Jamie Thom [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, August 08, 2006 6:11 PM Subject: Re: [qmailtoaster] SpamAssassin not running using SURBL Good points Anand, I've edited the wiki entry appropriately - LMK what you think! Cheers, Jamie Just saw the wiki again. There is a file called 25_uribl.cf in /usr/share/spamassassin directory which contains all the scores required for SURBLs.So you need not put anything with urirhssub in local.cf or userpref.cf. Another point that was raised in the SA mailing list regarding problems with SURBLs was this. If it is not working inspite of all this, this was recommended . From SA mailing list spamassassin -D dns --lint This will show you all of the DNS debugging info. If there is a problem, you should see it there. If that looks good, try a full debug run. BINGO! It found out that DNS::Resolver was not installed. Installed it - and now it works fine. I had this problem. Then I installed this and it went thro fine. I'm on RHEL 4. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscanner, Spamassassin Clamav don't work
- Original Message - From: fuzzy [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Monday, August 07, 2006 7:39 PM Subject: Re: [qmailtoaster] Simscanner, Spamassassin Clamav don't work Firdaus Tjahyadi wrote: hello i have strange info about my tcp.smtp my default tcp.smtp is like this 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONG RCPTLIMIT=10,DKVERIFY=DEGIJKfh,QMAILQUEUE=/var/qmail/bin/simscan,DKQUE UE=/var/qmail/bin/qmail- queue.orig,DKSIGN=/var/qmail/control/domainkeys/%/private i've got simscanner, spamassassin clamav info in email header but domainkeys info is missing what shold i do thanks right this is the default file from the install: 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private :allow,BADMIMETYPE=,BADLOADERTYPE=M,CHKUSER_RCPTLIMIT=50,CHKUSER_WRONG RCPTLIMIT=10,DKVERIFY=DEGIJKfh,QMAILQUEUE=/var/qmail/bin/simscan,DKQUE UE=/var/qmail/bin/qmail-queue.orig,DKSIGN=/var/qmail/control/domainkeys/% /private if you change the first line to (notice the highlighted changes): 127.:allow,RELAYCLIENT=,DKSIGN=/var/qmail/control/domainkeys/%/private,Q MAILQUEUE=/var/qmail/bin/simscan Altho simscan will kick in...it will still not pass thro SA.Whether mail is to be passed to SA depends on RELAYCLIENT env var. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] how to filter incoming mails
It will not be there ..You have to load this plugin using the Load directive that is there for others in that file. Anand - Original Message - From: Ganesh To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, July 25, 2006 5:29 PM Subject: RE: [qmailtoaster] how to filter incoming mails grep URIDNSBL /etc/mail/spamassassin/v310.pre I could find 0 results for URIDNSBL on file v310.pre, but the file is there. Regards, Ganesh From: K Anand [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 5:22 PMTo: qmailtoaster-list@qmailtoaster.comSubject: Re: [qmailtoaster] how to filter incoming mails 0) enable URIDNSBL plugin..It can be done from v310.pre or whichever pre file is there in /etc/mail/spamassassin...1) the supervise script of spamd has a -L option...This needs to be removedfor enabling network tests...2) skip_rbl_checks 1 has no effect on URIDNSBL plugin.3) Since i have enabled DNSBL tests via qmail blacklists, the skip_rbl_checks can stay as 1. Check if this is ur case. If you are checking against blacklists via spamassassin , skip_rbl_checks in local.cf in /etc/mail/spamassassin needs to 0. It is better to do this checking at qmail level rather than at spamassasin level since the mails will get rejected at smtp level itself. Anand - Original Message - From: Ganesh To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, July 25, 2006 4:49 PM Subject: RE: [qmailtoaster] how to filter incoming mails Anand, Thank you for your reply, I enabled and set the sync with rulesemporium for spamassassin rules. And my mails are showing spamassassin and simscan filter info on their headers. How can I enable URIDNSBL? Regards, Ganesh From: K Anand [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 4:48 PMTo: qmailtoaster-list@qmailtoaster.comSubject: Re: [qmailtoaster] how to filter incoming mails Also, check the message headers of your incoming mails...It should show whether mail is coming thru spamassassin or not . Anand - Original Message - From: Ganesh To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, July 25, 2006 10:05 AM Subject: FW: [qmailtoaster] how to filter incoming mails [EMAIL PROTECTED] ~]# ps aux | grep spam root 2032 0.0 0.0 3280 212 ? S Jul22 0:00 supervise spamd vpopmail 2050 0.0 0.0 3280 464 ? S Jul22 0:18 /usr/bin/tcpserver -v -R -H -l domain.com -x /etc/tcprules.d/tcp.smtp.cdb -c 100 -u 89 -g 89 0 smtp /usr/bin/rblsmtpd -r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org -r dnsbl.antispam.or.id /var/qmail/bin/qmail-smtpd /home/vpopmail/bin/vchkpw /bin/true qmaill 2051 0.0 0.0 1588 316 ? S Jul22 0:01 /usr/bin/multilog t s100 n100 /var/log/qmail/spamd root 2065 0.0 10.2 56028 52628 ? S Jul22 0:31 /usr/bin/perl -T -w /usr/bin/spamd -L -x -u vpopmail -s stderr vpopmail 29651 0.1 11.0 60356 56992 ? S Jul24 1:17 spamd child vpopmail 3640 1.6 11.3 61544 58224 ? R 05:40 4:30 spamd child clamav 12047 0.0 0.2 5652 1044 ? S 10:06 0:00 spamc root 12049 0.0 0.1 4896 656 pts/0 S+ 10:06 0:00 grep spam [EMAIL PROTECTED] ~]# Regards, Ganesh From: Ganesh [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 25, 2006 10:04 AMTo: 'qmailtoaster-list@qmailtoaster.com'Subject: RE: [qmailtoaster] how to filter incoming mails [EMAIL PROTECTED] ~]# qmail-spam help -bash: qmail-spam: command not found [EMAIL PROTECTED] ~]# qmail-spam restart -bash: qmail-spam: command not found [EMAIL PROTECTED] ~]# locate -u [EMAIL PROTECTED] ~]# locate qmail-spam /disk2/backup/qmail/man/man5/qmail-spamthrottle.5.bz2 /disk2/backup/qmail/man/man5/qmail-spamt.5.bz2 /disk2/backup/qmail/man/cat5/qmail-spamt.0.bz2 /disk2/backup/qmail/man/cat5/qmail-spamthrottle.0.bz2 /var/qmail/man/cat5/qmail-spamthrottle.0.bz2 /var/qmail/man/cat5/qmail-spamt.0.bz2 /var/qmail/man/man5/qmail-spamthrottle.5.bz2 /var/qmail/man/man5/qmail-spamt.5.bz2 [EMAIL PROTECTED] ~]# Please guide me Regards, Ganesh From: Jake Vickers
Re: [qmailtoaster] DNSBL
- Original Message - From: Natalio Gatti [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, July 21, 2006 6:30 PM Subject: Re: [qmailtoaster] DNSBL On 7/21/06, K Anand [EMAIL PROTECTED] wrote: I made the changes to my server today and its kicking out a lot more spams... Anand How did you enable that feature? I´m having a lot of spam, and need to cut it out! Thanks. Natalio 0) enable URIDNSBL plugin..It can be done from v310.pre... 1) the supervise script of spamd has a -L option...This needs to be removed for enabling network tests... 2) skip_rbl_checks 1 has no effect on URIDNSBL plugin. 3) Since i have enabled DNSBL tests via qmail blacklists, the skip_rbl_checks can stay as 1. thats itIt will automatically scan email bodies for spam URLS...These URLs will be checked against SURBL sites and they will be blocked... Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] DNSBL
I made the changes to my server today and its kicking out a lot more spams... Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:51 AM Subject: Re: [qmailtoaster] DNSBL I did a bit more searching and found out that 1) the supervise script of spamd has a -L option...This needs to be removed for enabling network tests... 2) skip_rbl_checks 1 has no effect on URIDNSBL plugin. 3) Since i have enabled DNSBL tests via qmail blacklists, the skip_rbl_checks can stay as 1. Any one has anymore ideas ...I would like to test this setup . Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:21 AM Subject: Re: [qmailtoaster] DNSBL Sorry , my question was wrong...I'm already using blacklists..I have the same ones like yours. But a still some spam is coming through. I was just reading up and found out that there are SURBL lists which are different from DNSBL lists...These lists work on the URLs which are included in the body of the spam mailsThats what I want to enable now... - Original Message - From: Jon M. Ernster [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:10 AM Subject: RE: [qmailtoaster] DNSBL You can define DNSBL's through qmail which blocks connections at the smtp level as opposed to the spamassassin level in which you reference local.cf Check out Jake's page here: http://v2gnu.com/qmail/ In my setup, I also changed my /var/qmail/control/blacklists file to use the following black holes: [EMAIL PROTECTED] control]# cat blacklists -r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org -r dnsbl.antispam.or.id -Original Message- From: K Anand [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 19, 2006 10:40 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] DNSBL I want to enable DNSBL tests in my toaster. What are the changes I have to do ? As far as i could make out, these are the changes I have to do : 1) load the URIDNSBL plugin. It was mentioned on www.surbl.org that network tests need to be enabled Is this default on toaster or do I have to change any settings. Also, in local.cf , this line appears. skip_rbl_checks 1 should it be changed ??? Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] scan only incoming mail
I searched a lot and this is what I managed to come up with : 1) I need to do virus and attachment scanning on all mails both inbound and outbound. 2) I need to do spam checking on only incoming mails from internet. 3) With these requirements, i cannot implement in toaster. 4) The only way I have figured is to use qmail-scanner for my local network and use simscan with all other ips. I will be changing the QMAILQUEUE in tcp.smtp . If anyone has another solution please let me know. I have already tested this setup on a test server. It seems to be working. Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, July 21, 2006 10:53 AM Subject: [qmailtoaster] scan only incoming mail Hi, Does anyone know how to setup spamassassin only to scan incoming mails...On my server, where I have loaded default qmt, all mails get scanned , both incoming and outbound. I would like to stop scanning of outbound mails. Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan outgoing mail
Does this mean that if RELAYCLIENT is set in tcp.smtp, spamassassin won't kick in ?? Because on my installation, all mails end up going thru SA. Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, July 18, 2006 3:15 AM Subject: Re: [qmailtoaster] Simscan outgoing mail Josh Dinsdale wrote: Hi Guys I cant find anything clear on the qmail sites so thought id post here. Does qmail toaster scan outgoing email with simscan as it does with incoming? Not normally. The RELAYCLIENT flag controls this. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan outgoing mail
OK...I had a look at the source of simscan.Apparently, in 1.2 spam checking is disabled for authenticated users...This is checked from the RELAYCLIENT variable...I'm on 1.1..So that should solve my problem. Hope this clarifies the position to a lot of people out there. Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, July 21, 2006 4:10 PM Subject: Re: [qmailtoaster] Simscan outgoing mail Does this mean that if RELAYCLIENT is set in tcp.smtp, spamassassin won't kick in ?? Because on my installation, all mails end up going thru SA. Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Tuesday, July 18, 2006 3:15 AM Subject: Re: [qmailtoaster] Simscan outgoing mail Josh Dinsdale wrote: Hi Guys I cant find anything clear on the qmail sites so thought id post here. Does qmail toaster scan outgoing email with simscan as it does with incoming? Not normally. The RELAYCLIENT flag controls this. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] DNSBL
I did a bit more searching and found out that 1) the supervise script of spamd has a -L option...This needs to be removed for enabling network tests... 2) skip_rbl_checks 1 has no effect on URIDNSBL plugin. 3) Since i have enabled DNSBL tests via qmail blacklists, the skip_rbl_checks can stay as 1. Any one has anymore ideas ...I would like to test this setup . Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:21 AM Subject: Re: [qmailtoaster] DNSBL Sorry , my question was wrong...I'm already using blacklists..I have the same ones like yours. But a still some spam is coming through. I was just reading up and found out that there are SURBL lists which are different from DNSBL lists...These lists work on the URLs which are included in the body of the spam mailsThats what I want to enable now... - Original Message - From: Jon M. Ernster [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:10 AM Subject: RE: [qmailtoaster] DNSBL You can define DNSBL's through qmail which blocks connections at the smtp level as opposed to the spamassassin level in which you reference local.cf Check out Jake's page here: http://v2gnu.com/qmail/ In my setup, I also changed my /var/qmail/control/blacklists file to use the following black holes: [EMAIL PROTECTED] control]# cat blacklists -r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org -r dnsbl.antispam.or.id -Original Message- From: K Anand [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 19, 2006 10:40 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] DNSBL I want to enable DNSBL tests in my toaster. What are the changes I have to do ? As far as i could make out, these are the changes I have to do : 1) load the URIDNSBL plugin. It was mentioned on www.surbl.org that network tests need to be enabled Is this default on toaster or do I have to change any settings. Also, in local.cf , this line appears. skip_rbl_checks 1 should it be changed ??? Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] scan only incoming mail
Hi, Does anyone know how to setup spamassassin only to scan incoming mails...On my server, where I have loaded default qmt, all mails get scanned , both incoming and outbound. I would like to stop scanning of outbound mails. Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] DNSBL
I want to enable DNSBL tests in my toaster. What are the changes I have to do ? As far as i could make out, these are the changes I have to do : 1) load the URIDNSBL plugin. It was mentioned on www.surbl.org that network tests need to be enabled Is this default on toaster or do I have to change any settings. Also, in local.cf , this line appears. skip_rbl_checks 1 should it be changed ??? Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] DNSBL
Sorry , my question was wrong...I'm already using blacklists..I have the same ones like yours. But a still some spam is coming through. I was just reading up and found out that there are SURBL lists which are different from DNSBL lists...These lists work on the URLs which are included in the body of the spam mailsThats what I want to enable now... - Original Message - From: Jon M. Ernster [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, July 20, 2006 11:10 AM Subject: RE: [qmailtoaster] DNSBL You can define DNSBL's through qmail which blocks connections at the smtp level as opposed to the spamassassin level in which you reference local.cf Check out Jake's page here: http://v2gnu.com/qmail/ In my setup, I also changed my /var/qmail/control/blacklists file to use the following black holes: [EMAIL PROTECTED] control]# cat blacklists -r sbl.spamhaus.org -r bl.spamcop.net -r relays.ordb.org -r dnsbl.antispam.or.id -Original Message- From: K Anand [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 19, 2006 10:40 PM To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] DNSBL I want to enable DNSBL tests in my toaster. What are the changes I have to do ? As far as i could make out, these are the changes I have to do : 1) load the URIDNSBL plugin. It was mentioned on www.surbl.org that network tests need to be enabled Is this default on toaster or do I have to change any settings. Also, in local.cf , this line appears. skip_rbl_checks 1 should it be changed ??? Thanx Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] whitelist_from_rcvd
I want to add a whitelist_from_rcvd entry not whitelist_from. Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, July 05, 2006 9:05 PM Subject: Re: [qmailtoaster] whitelist_from_rcvd K Anand wrote: Hi all, I want to add an entry for qmt list into my whitelist..I want to add a whitelist_from_rcvd.. Here are the headers from a post. What should the entry be ? whitelist_from_rcvd qmailtoaster-list@qmailtoaster.com ns1.qmailtoaster.com You're trying to add the list as a whitelist in SpamAssassin? This is what the entry in your /etc/mail/spamassassin/local.cf should look like: whitelist_from [EMAIL PROTECTED] And that's it. Not sure what you're trying to do with the ns1.qmailtoaster.com entry. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] whitelist_from_rcvd
Hi all, I want to add an entry for qmt list into my whitelist..I want to add a whitelist_from_rcvd.. Here are the headers from a post. What should the entry be ? whitelist_from_rcvd qmailtoaster-list@qmailtoaster.com ns1.qmailtoaster.com IS this OK ?? Anand Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 12133 invoked by uid 89); 2 Jul 2006 08:09:42 - Received: by simscan 1.1.0 ppid: 12041, pid: 12095, t: 15.4931s scanners: attach: 1.1.0 clamav: 0.88.2/m:39/d:1578 spam: 3.1.1 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on sail-steel.com X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00, SARE_SUB_OBFU_Q1,TW_PM autolearn=no version=3.1.1 Received: from unknown (HELO ns1.qmailtoaster.com) (38.99.66.144) by sail-steel.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 2 Jul 2006 08:09:27 - Received-SPF: pass (sail-steel.com: SPF record at qmailtoaster.com designates 38.99.66.144 as permitted sender) Received: (qmail 31429 invoked by uid 89); 2 Jul 2006 07:58:24 - Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: mailto:qmailtoaster-list@qmailtoaster.com List-Help: mailto:[EMAIL PROTECTED] List-Unsubscribe: mailto:[EMAIL PROTECTED] List-Subscribe: mailto:[EMAIL PROTECTED] Reply-To: qmailtoaster-list@qmailtoaster.com Delivered-To: mailing list qmailtoaster-list@qmailtoaster.com Received: (qmail 31423 invoked by uid 89); 2 Jul 2006 07:58:24 - Received-SPF: pass (ns1.qmailtoaster.com: SPF record at _spf.google.com designates 64.233.162.202 as permitted sender) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content -transfer-encoding:content-disposition; b=AOEGR0JwEVtCWIJzx7Fc3Zb/OWRx+1IBxAkmf/BtKV6bJSbw+3m1i9lIlQpLioydur4g84hjYW 9r1ikZNKhRnefpVFJsrWxKc7Y+eIzdualmcq8/p5tZ73rJ5aXIBK0V0KveaClFH+GVNbJzOLVrr2 81371C3xWJaAV5h/d/ZKc= Message-ID: [EMAIL PROTECTED] Date: Sun, 2 Jul 2006 00:58:15 -0700 From: Erik Espinoza [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: [qmailtoaster] UPDATED PACKAGE: clamav-toaster-0.88.3-1.3.2.src.rpm X-Antivirus: AVG for E-mail 7.1.394 [268.9.8/380] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan not logging invalid attachments
Please someone respond to this I really need to get this working..Is this too great a problem to be solved or the maintainers don't have time to respond to this or is this considered to be too simple ?? Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, June 23, 2006 10:54 AM Subject: [qmailtoaster] Simscan not logging invalid attachments Hi all, Since I got no replies am reposting. I had upgraded Simscan to the latest on the site on my test server I use attachment scanning. In the previous version, there used to be a log in /var/log/qmail/smtp when blocked atachments were being dropped by simscan. But in the new version , the log is not coming..Any ideas why ? I need to upgrade bcos the simscan that I have on my live server takes a long time to scan attachments..I saw in an earlier post that the solution was to upgrade simscan Another problem..I am getting such messages in my spamd log.. server reached --max-children setting, consider raising it..This happens sometimes...Also, my smtpd log shows 100/100 connections ...I've got 1GB RAM and currently, only ~ 400 MB is being used...its a 3 GHZ Xeon UniProc machine.. this generally happens when I get mails from a mailing list where most of my users have subscribed.. Also, I had enabled URIDNSBL...I changed v310.pre and local.cf.. I enabled loadplugin in local.cf and in v310.pre changed skip_rbl_checks 1 to 0Is this correct ??? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan not logging invalid attachments
this is from my test server @400044a3c1652faf38d4 tcpserver: status: 1/400 @400044a3c1652faf448c tcpserver: pid 29621 from 127.0.0.1 @400044a3c1652faf4874 tcpserver: ok 29621 mailer1.sail.com:127.0.0.1:25 :127.0.0.1::35587 @400044a3c170317eb144 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote 10.128.1.199:unknown:127.0.0.1 rcpt [EMAIL PROTECTED] : found existing recipient @400044a3c1703230f214 simscan:[29621]:ATTACH:0.0110s:showletter.jpg:127.0.0.1:[EMAIL PROTECTED] com:[EMAIL PROTECTED] @400044a3c17032628194 tcpserver: end 29621 status 256 @400044a3c17032628d4c tcpserver: status: 0/400 @400044a3c1b8073d4f44 tcpserver: status: 1/400 @400044a3c1b8073d9594 tcpserver: pid 29636 from 127.0.0.1 @400044a3c1b8073d997c tcpserver: ok 29636 mailer1.sail.com:127.0.0.1:25 :127.0.0.1::35588 @400044a3c1c308fd6634 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote 10.128.1.199:unknown:127.0.0.1 rcpt [EMAIL PROTECTED] : found existing recipient @400044a3c1c30c01a96c simscan:[29636]:RELAYCLIENT:0.0500s:-:127.0.0.1:[EMAIL PROTECTED]:kana [EMAIL PROTECTED] @400044a3c1c30c705d44 tcpserver: end 29636 status 0 @400044a3c1c30c70edcc tcpserver: status: 0/400 The first mail was rejected...the second went through...Its strange because when I was doing this a few days back, the rejected mails was not getting logged at all..Just now I did an rpm -e simscan and rpm -Uvh simscan Its still not showing that the first mail was rejectedAnyway, I can live with that... What about the way I set up my DNSBL ?? Is that OK ? - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, June 29, 2006 5:06 PM Subject: Re: [qmailtoaster] Simscan not logging invalid attachments K Anand wrote: Please someone respond to this I really need to get this working..Is this too great a problem to be solved or the maintainers don't have time to respond to this or is this considered to be too simple ?? Show us a tail of what you are getting. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan not logging invalid attachments
I'll check there also..Thanx.. Anand - Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, June 29, 2006 5:52 PM Subject: Re: [qmailtoaster] Simscan not logging invalid attachments K Anand wrote: this is from my test server @400044a3c1652faf38d4 tcpserver: status: 1/400 @400044a3c1652faf448c tcpserver: pid 29621 from 127.0.0.1 @400044a3c1652faf4874 tcpserver: ok 29621 mailer1.sail.com:127.0.0.1:25 :127.0.0.1::35587 @400044a3c170317eb144 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote 10.128.1.199:unknown:127.0.0.1 rcpt [EMAIL PROTECTED] : found existing recipient @400044a3c1703230f214 simscan:[29621]:ATTACH:0.0110s:showletter.jpg:127.0.0.1:[EMAIL PROTECTED] com:[EMAIL PROTECTED] The first mail was rejected...the second went through...Its strange because when I was doing this a few days back, the rejected mails was not getting logged at all..Just now I did an rpm -e simscan and rpm -Uvh simscan Its still not showing that the first mail was rejectedAnyway, I can live with that... What about the way I set up my DNSBL ?? Is that OK ? I have not had a chance to look into this much (I'm working on another script right now), but did you check the logs in /var/log/qmail/clamd? I think it may put a line or two in there as well. - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] Simscan not logging invalid attachments
- Original Message - From: Jake Vickers [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, June 29, 2006 5:52 PM Subject: Re: [qmailtoaster] Simscan not logging invalid attachments K Anand wrote: this is from my test server @400044a3c1652faf38d4 tcpserver: status: 1/400 @400044a3c1652faf448c tcpserver: pid 29621 from 127.0.0.1 @400044a3c1652faf4874 tcpserver: ok 29621 mailer1.sail.com:127.0.0.1:25 :127.0.0.1::35587 @400044a3c170317eb144 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote 10.128.1.199:unknown:127.0.0.1 rcpt [EMAIL PROTECTED] : found existing recipient @400044a3c1703230f214 simscan:[29621]:ATTACH:0.0110s:showletter.jpg:127.0.0.1:[EMAIL PROTECTED] com:[EMAIL PROTECTED] The first mail was rejected...the second went through...Its strange because when I was doing this a few days back, the rejected mails was not getting logged at all..Just now I did an rpm -e simscan and rpm -Uvh simscan Its still not showing that the first mail was rejectedAnyway, I can live with that... What about the way I set up my DNSBL ?? Is that OK ? I have not had a chance to look into this much (I'm working on another script right now), but did you check the logs in /var/log/qmail/clamd? I think it may put a line or two in there as well. I checked today morning..Heres the log from smtpd. 2006-06-30 11:11:52.822073500 tcpserver: status: 1/400 2006-06-30 11:11:52.822076500 tcpserver: pid 6454 from 127.0.0.1 2006-06-30 11:11:52.822077500 tcpserver: ok 6454 mailer1.sail.com:127.0.0.1:25 :127.0.0.1::35598 2006-06-30 11:12:03.851309500 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote 10.128.1.199:unknown:127.0.0.1 rcpt [EMAIL PROTECTED] : found existing recipient 2006-06-30 11:12:03.862911500 simscan:[6454]:ATTACH:0.0110s:showletter.jpg:127.0.0.1:[EMAIL PROTECTED] om:[EMAIL PROTECTED] 2006-06-30 11:12:03.872057500 tcpserver: end 6454 status 256 2006-06-30 11:12:03.872060500 tcpserver: status: 0/400 Nothing showed up in the clamd or spamd logs. Another thing I noticedTheres a time lag , almost 11 secs, between when the conection was established and when CHKUSER kicked in..This is only on my test server...Why could that be ? - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Simscan not logging invalid attachments
Hi all, Since I got no replies am reposting. I had upgraded Simscan to the latest on the site on my test server I use attachment scanning. In the previous version, there used to be a log in /var/log/qmail/smtp when blocked atachments were being dropped by simscan. But in the new version , the log is not coming..Any ideas why ? I need to upgrade bcos the simscan that I have on my live server takes a long time to scan attachments..I saw in an earlier post that the solution was to upgrade simscan Another problem..I am getting such messages in my spamd log.. server reached --max-children setting, consider raising it..This happens sometimes...Also, my smtpd log shows 100/100 connections ...I've got 1GB RAM and currently, only ~ 400 MB is being used...its a 3 GHZ Xeon UniProc machine.. this generally happens when I get mails from a mailing list where most of my users have subscribed.. Also, I had enabled URIDNSBL...I changed v310.pre and local.cf.. I enabled loadplugin in local.cf and in v310.pre changed skip_rbl_checks 1 to 0Is this correct ??? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] Simscan not logging invalid attachments
Hi all, I had upgraded Simscan to the latest on the site... I use attachment scanning. In the previous version, there used to be a log in /var/log/qmail/smtp when blocked atachments were being dropped by simscan. But in the new version , the log is not coming..Any ideas why ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] simscan update -- no spam check
I noticed another thing..When I sent mail from my production server to my test server, that mail went through spamassassinSo has any change been made so that only mails coming from other domains will go thro spamassassin ?? Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, June 15, 2006 4:28 PM Subject: [qmailtoaster] simscan update -- no spam check Hi all, I have upgraded my simscan to current version -- 1.3.1.. I did this on a test server..I find that simscan is not using spamassassin... qmailctl shows that spamd and spamd/log are runningwhen I do qmailctl stop and start, in the spam log I can see the restart...but mails are not showing that they have passed thro spamassassin...they show only clamav and attach..(I have also included attachment scanning)... I have upgraded only my simscan package and installed the ripmime package... Any clues... Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] simscan update -- no spam check
OK..I got the problem..I was checking with webmail...There was a setting in simscan not to check spam for authenticated users..when I tried from OE, it went thro fine.. Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Friday, June 16, 2006 9:52 AM Subject: Re: [qmailtoaster] simscan update -- no spam check I noticed another thing..When I sent mail from my production server to my test server, that mail went through spamassassinSo has any change been made so that only mails coming from other domains will go thro spamassassin ?? Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Thursday, June 15, 2006 4:28 PM Subject: [qmailtoaster] simscan update -- no spam check Hi all, I have upgraded my simscan to current version -- 1.3.1.. I did this on a test server..I find that simscan is not using spamassassin... qmailctl shows that spamd and spamd/log are runningwhen I do qmailctl stop and start, in the spam log I can see the restart...but mails are not showing that they have passed thro spamassassin...they show only clamav and attach..(I have also included attachment scanning)... I have upgraded only my simscan package and installed the ripmime package... Any clues... Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] upgrade clamav
I've upgraded my clamav to clamav-toaster-0.88.2 ..but this is what is showing in my emails... clamav: 0.88.1/m:38/d:1451 I have also updated the daily and main cvds to be the ones which are current... What could the problem be ??? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] upgrade clamav
I was just seeing some old mails...Should I run simscanmk -g ?? Anand - Original Message - From: K Anand [EMAIL PROTECTED] To: qmailtoaster-list@qmailtoaster.com Sent: Wednesday, June 14, 2006 5:08 PM Subject: [qmailtoaster] upgrade clamav I've upgraded my clamav to clamav-toaster-0.88.2 ..but this is what is showing in my emails... clamav: 0.88.1/m:38/d:1451 I have also updated the daily and main cvds to be the ones which are current... What could the problem be ??? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] upgrade clamav problems
I have upgraded my clamav..after upgrade and restart of machine..I see this in my freshclam.log ERROR: Can't save PID to file /var/run/clamav/freshclam.pid: No such file or directory I manually upgraded the clam db's and it went thro fine...Is this a problem ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] badmailfrom bug or feature
I have a small problem with badmailfrom.When I put @t in the file, it is blocking all emails from any domain starting with t...Actually I want it to block only [EMAIL PROTECTED] not, say, [EMAIL PROTECTED] Another thing was also happeningwhen I put .cn , it was blocking emails from users with cn in their userids Any pointers ? Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [qmailtoaster] SA - learn
K Anand wrote: I have installed qmt and want to make my sa learn from spams that are getting through. Our users use POP3 to access mailsSo all the mails get downloaded to their machines...I was reading somewhere that SA can learn from attachments also...I have already set up a spam account where I will ask all my users to send the spams that they are getting as attachments... Will this setup work ? or do I need to do anything special ? Jake Vickers wrote: It will work. You'll have to have your users forward the messages to your spam account as attachments. Then, set up Outlook Express or something, and set up the spam account on it. when your users send you messages, drag the attachment into a mail folder (ie: Spam). Then run the sa-learn script on those messages. So sa-learn cannot automatically learn from the attachments without my intervention ? or I could use some utility, saw it either on this list or somewhere else, which extracts the attachments and then run sa-learn on that.. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[qmailtoaster] SA - learn
I have installed qmt and want to make my sa learn from spams that are getting through. Our users use POP3 to access mailsSo all the mails get downloaded to their machines...I was reading somewhere that SA can learn from attachments also...I have already set up a spam account where I will ask all my users to send the spams that they are getting as attachments... Will this setup work ? or do I need to do anything special ? Thanx. Anand - QmailToaster hosted by: VR Hosted http://www.vr.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
