Re: [qmailtoaster] Spam list smtp server blocked

[Remo Mattei]

yes agree with you Allan, my site is clean from mailbox as well. 

Remo 

> On Aug 20, 2020, at 11:03 AM, qmailtoas...@dukat.dk wrote:
> 
> Hi Mike
> 
> I once ended up on a block list that required $ 200 to remove my IP address 
> from the list, which of course I did not.
> 
> I told my client and the administrator of the site he was trying to send to 
> that my server was not on any other block list in according to this site:
> 
> https://mxtoolbox.com/SuperTool.aspx
> 
> And I would not do anything to be removed from that list and advised them not 
> to use it because it was run by scammers.
> 
> Allan Dukat
> 
> 
> On 2020-08-19 20:17, Miguel Angel Amable Ventura wrote:
>> Good day everyone,
>> I need advise, I have a problem with this spam list: 
>> https://www.mipspace.com/
>> My server is listed there I can't get it unlisted from there, what
>> will you do in that case?
>> I have my vps server running in digital ocean do you have any other
>> recommendation?
>> I have tried with this other new vpsserver.com server but the ip
>> address given to the new server is also blocked in that list!
>> Thank you in advance for your advice.
>> Have a nice day!
>> Mike
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam list smtp server blocked

[qmailtoaster]

Hi Mike

I once ended up on a block list that required $ 200 to remove my IP 
address from the list, which of course I did not.


I told my client and the administrator of the site he was trying to send 
to that my server was not on any other block list in according to this 
site:


https://mxtoolbox.com/SuperTool.aspx

And I would not do anything to be removed from that list and advised 
them not to use it because it was run by scammers.


Allan Dukat


On 2020-08-19 20:17, Miguel Angel Amable Ventura wrote:

Good day everyone,

I need advise, I have a problem with this spam list: 
https://www.mipspace.com/


My server is listed there I can't get it unlisted from there, what
will you do in that case?

I have my vps server running in digital ocean do you have any other
recommendation?

I have tried with this other new vpsserver.com server but the ip
address given to the new server is also blocked in that list!

Thank you in advance for your advice.

Have a nice day!

Mike



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam list smtp server blocked

[Remo Mattei]

well my IP is 20 years old and I got the same as Ed MIPSpace-All, 
MIPSpace-Poor. So I wonder since I checked with others and got all clean.. 



> On Aug 19, 2020, at 11:17 AM, Miguel Angel Amable Ventura 
>  wrote:
> 
> Good day everyone,
> 
> I need advise, I have a problem with this spam list: https://www.mipspace.com/
> 
> My server is listed there I can't get it unlisted from there, what will you 
> do in that case?
> 
> I have my vps server running in digital ocean do you have any other 
> recommendation?
> 
> I have tried with this other new vpsserver.com server but the ip address 
> given to the new server is also blocked in that list!
> 
> Thank you in advance for your advice.
> 
> Have a nice day!
> 
> Mike
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 

Re: [qmailtoaster] Spam list smtp server blocked

[nowuknow]

On the 2nd thought, MIPSpace could be blocking everybody and there is no 
way to remove yourself. In any case, you want to interact with whoever 
is rejecting your mail based on MIPSpace list. In the worst case 
scenarios, you can request that your VPS provider reaches out to the 
receiving network postmaster to see if they can allow your mail.


I just checked one of my IP addresses and they claim it is on 
MIPSpace-All and MIPSpace-Poor list, which is nonsensical. It is a 
fairly new IP address (3 yrs) old that was less active until several 
months ago. Initially, my  closed-loop verification membership 
newsletter was blocked by some providers (e.g. Outlook). I worked with 
all of them to get the block removed and it is working fine now.


Ed


On 8/19/20 2:17 PM, Miguel Angel Amable Ventura wrote:

Good day everyone,

I need advise, I have a problem with this spam list: 
https://www.mipspace.com/


My server is listed there I can't get it unlisted from there, what 
will you do in that case?


I have my vps server running in digital ocean do you have any other 
recommendation?


I have tried with this other new vpsserver.com server but the ip 
address given to the new server is also blocked in that list!


Thank you in advance for your advice.

Have a nice day!

Mike


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam list smtp server blocked

[nowuknow]

If you were assigned an IP address that was already on the list (range), 
then not much. They may be blocking entire ranges.


Check similar IP addresses in their database to confirm. Ultimately, it 
is the decision of the receiving side to use mipspace that is 
responsible for your mail being blocked. Short of finding a clean IP 
address/range, not much you can do.


Ed


On 8/19/20 2:17 PM, Miguel Angel Amable Ventura wrote:

Good day everyone,

I need advise, I have a problem with this spam list: 
https://www.mipspace.com/


My server is listed there I can't get it unlisted from there, what 
will you do in that case?


I have my vps server running in digital ocean do you have any other 
recommendation?


I have tried with this other new vpsserver.com server but the ip 
address given to the new server is also blocked in that list!


Thank you in advance for your advice.

Have a nice day!

Mike


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam list smtp server blocked

[Miguel Angel Amable Ventura]

Good day everyone,

I need advise, I have a problem with this spam list: 
https://www.mipspace.com/


My server is listed there I can't get it unlisted from there, what will 
you do in that case?


I have my vps server running in digital ocean do you have any other 
recommendation?


I have tried with this other new vpsserver.com server but the ip address 
given to the new server is also blocked in that list!


Thank you in advance for your advice.

Have a nice day!

Mike


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam emails

[ChandranManikandan]

Hi Friends,

I have blocked spam emails in blacklist_sender of spamdyke and local.cf of
spamassassin and subject, body wise.But still repeated emails are coming
with different domain emails.how to tighten the spam emails and blocked.


spamdyke.conf
dns-blacklist-entry=bl.spamcop.net
graylist-dir=/var/spamdyke/graylist
graylist-level=none
graylist-max-secs=2678400
graylist-min-secs=180
greeting-delay-secs=8
header-blacklist-entry=From:*>,*<*
idle-timeout-secs=60
ip-blacklist-file=/etc/spamdyke/blacklist_ip
ip-in-rdns-keyword-blacklist-file=/etc/spamdyke/blacklist_keywords
ip-in-rdns-keyword-whitelist-file=/etc/spamdyke/whitelist_keywords
ip-whitelist-file=/etc/spamdyke/whitelist_ip
qmail-rcpthosts-file=/var/qmail/control/rcpthosts
#qmail-rcpthosts-file=/var/qmail/control/qmail-morercpthosts-cdb
log-level=info
max-recipients=50
#policy-url=http://my.policy.explanation.url/
rdns-blacklist-file=/etc/spamdyke/blacklist_rdns
rdns-whitelist-file=/etc/spamdyke/whitelist_rdns
recipient-blacklist-file=/etc/spamdyke/blacklist_recipients
recipient-whitelist-file=/etc/spamdyke/whitelist_recipients
reject-empty-rdns
reject-ip-in-cc-rdns
reject-sender=no-mx
reject-unresolvable-rdns
sender-blacklist-file=/etc/spamdyke/blacklist_senders
sender-whitelist-file=/etc/spamdyke/whitelist_senders
tls-certificate-file=/var/qmail/control/servercert.pem
tls-level=smtp

local.cf
ok_locales all
skip_rbl_checks 0

required_hits 5.0
report_safe 0
#rewrite_header Subject [SPAM]

use_pyzor 0

ok_languages all

use_auto_whitelist 0

use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1
use_razor2 0
use_dcc 0


-- 


*Regards,Manikandan.C*

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

Yes,
The mail flow generate the DKIM key for outgoing mail
Now the email is received in Inbox in gmail and DKIM value also pass
showing.


On Thu, Oct 3, 2019 at 8:04 PM Eric's mail  wrote:

> Mail is flowing and dkim key is signing outgoing mail?
>
> Get Outlook for Android 
>
>
>
>
> On Thu, Oct 3, 2019 at 5:14 AM -0600, "Chandran Manikandan" <
> tech2m...@gmail.com> wrote:
>
> Hi Eric,
>>
>> I have done of your advise.
>> the below list of files
>>
>> -rws--x--x 1 qmailq qmail  50K Apr 15  2014 qmail-dk
>> -rws--x--x 1 qmailq qmail  27K Apr 15  2014 qmail-queue
>>
>> There is no link with qmail-queue and qmail-dk
>>  and there is no qmail-queue.orig file
>>
>> and tcp.smtp file is like below.
>>
>> 127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
>>
>> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan"
>>
>> Is it my setup is okay or did i miss anything.
>>
>> Thanks.
>>
>> On Mon, Sep 30, 2019 at 11:05 PM Eric Broch 
>> wrote:
>>
>>> I've removed DomainKeys (not DKIM) from qmail altogether in later
>>> versions and decided to use a wrapper for DKIM.
>>>
>>> So,
>>>
>>> If you have below list from /var/qmail/bin
>>>
>>> # ls -l /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue.orig
>>> /var/qmail/bin/qmail-dk
>>> -rws--x--x 1 qmailq qmail 52096 Jan 21  2018 /var/qmail/bin/qmail-dk
>>> lrwxrwxrwx 1 root   root 23 Jun 14  2018 /var/qmail/bin/qmail-queue
>>> -> /var/qmail/bin/qmail-dk
>>> -rws--x--x 1 qmailq qmail 27040 Jan 21  2018
>>> /var/qmail/bin/qmail-queue.orig
>>>
>>> Stop qmail
>>>
>>> # qmailctl stop
>>>
>>> Remove symlink to qmail-dk
>>>
>>> # unlink /var/qmail/bin/qmail-queue
>>>
>>> Move qmail-queue.orig to qmail-queue
>>>
>>> # mv /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-queue
>>>
>>> Start qmail
>>>
>>> # qmailctl start
>>>
>>> Remove DKSIGN, DKVERIFY, DKQUEUE (DomainKeys) from tcp.smtp.
>>>
>>> # qmailctl cdb
>>>
>>>
>>> On 9/29/2019 10:56 PM, ChandranManikandan wrote:
>>>
>>> Hi Eric,
>>>
>>> Thanks for your help.
>>> I have successfully rectified the issue with the following your steps
>>> above and tested in Gmail account from squirrel webmail.
>>> It is working now.
>>>
>>> I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i
>>> need amend the lines in this file. please let me know.
>>>
>>> DKSIGN="/var/qmail/control/domainkeys/%/private"
>>>
>>> On Sun, Sep 29, 2019 at 10:47 PM Eric Broch 
>>> wrote:
>>>
 Step 2) from http://www.qmailtoaster.com/dkim.html

 At the command line first create the key and txt record for the domain
 you want signed (replace otherdomain.com with the domain you want in
 every command below).
 So if your domain is mydomain.com the command would be, '# dknewkey
 /var/qmail/control/dkim/mydomain.com.key 1024 >
 /var/qmail/control/dkim/mydomain.com.txt'
 # dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
 /var/qmail/control/dkim/otherdomain.com.txt

 At command line change the selector in the txt record from
 'otherdomain.com.key._domainkey'  to  'dkim1._domainkey'
 # perl -pi -e 's/^.*\.key/dkim1/'
 /var/qmail/control/dkim/otherdomain.com.txt

 Check the file to see if substitution happened.
 # cat /var/qmail/control/dkim/otherdomain.com.txt
dkim1._domainkey   IN  TXT "k=rsa;
 p=**"


 Create DNS TXT record for otherdomain.com using the output from the
 text file 'otherdomain.com.txt' where your DNS settings are managed,
 usually your ISP (mine are Godaddy).
HostText
dkim1._domainkey   IN   TXT v=DKIM1; k=rsa;
 p=*

 Edit the signature file and add your domain. This is what the perl
 script 'qmail-remote' will read and then call the original qmail-remote now
 renamed to qmail-remote.orig.
 # vi /var/qmail/control/dkim/signconf.xml
   >>> keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
 
 
   

 So file looks like this:

 
   
   >>> keyfile="/var/qmail/control/dkim/global.key" method="simple"
 selector="dkim1">
 
   
   >>> keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
 
 
   
 


 Notes Step 2) Test your DKIM signature (Remember, replace
 otherdomain.com with your domain).
 # yum install epel-release opendkim
 # opendkim-testkey - -d otherdomain.com  -k
 /var/qmail/control/dkim/otherdomain.com.key -s dkim1

 On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan 
 wrote:

> Hi Eric,
>
> How do i implement DKIM for my domain. Really need your help.
> I have followed your 1 step only. do i need to follow all the four
> steps and how do i 

Re: [qmailtoaster] spam folder into gmail

[Eric's mail]

Mail is flowing and dkim key is signing outgoing mail? 




Get Outlook for Android







On Thu, Oct 3, 2019 at 5:14 AM -0600, "Chandran Manikandan" 
 wrote:










Hi Eric,
I have done of your advise.the below list of files
-rws--x--x 1 qmailq qmail  50K Apr 15  2014 qmail-dk
-rws--x--x 1 qmailq qmail  27K Apr 15  2014 qmail-queue

There is no link with qmail-queue and qmail-dk and there is no qmail-queue.orig 
file
and tcp.smtp file is like below.
127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan"

Is it my setup is okay or did i miss anything.
Thanks.
On Mon, Sep 30, 2019 at 11:05 PM Eric Broch  wrote:

  

  
  


I've removed DomainKeys (not DKIM) from qmail altogether in later
  versions and decided to use a wrapper for DKIM.




So,


If you have below list from /var/qmail/bin 




# ls -l /var/qmail/bin/qmail-queue
  /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-dk

  -rws--x--x 1 qmailq qmail 52096 Jan 21  2018
  /var/qmail/bin/qmail-dk

  lrwxrwxrwx 1 root   root 23 Jun 14  2018
  /var/qmail/bin/qmail-queue -> /var/qmail/bin/qmail-dk

  -rws--x--x 1 qmailq qmail 27040 Jan 21  2018
  /var/qmail/bin/qmail-queue.orig


Stop qmail




# qmailctl stop




Remove symlink to qmail-dk 




# unlink /var/qmail/bin/qmail-queue


Move qmail-queue.orig to qmail-queue




# mv /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-queue


Start qmail




# qmailctl start




Remove DKSIGN, DKVERIFY, DKQUEUE (DomainKeys) from tcp.smtp.


# qmailctl cdb





On 9/29/2019 10:56 PM,
  ChandranManikandan wrote:



  
  Hi Eric,



Thanks for your help.
I have successfully rectified the issue with the following
  your steps above and tested in Gmail account from squirrel
  webmail.
It is working now.



I have notified in /etc/tcprules.d/tcp.smtp file in below
  lines. Do i need amend the lines in this file. please let me
  know.



DKSIGN="/var/qmail/control/domainkeys/%/private" 


  
  

  
On Sun, Sep 29, 2019 at 10:47
  PM Eric Broch  wrote:



  

  

  

  
Step 2) from http://www.qmailtoaster.com/dkim.html



At the command line first create the key
  and txt record for the domain you want signed
  (replace otherdomain.com
  with the domain you want in every command
  below).
So if your domain is mydomain.com the
  command would be, '# dknewkey
  /var/qmail/control/dkim/mydomain.com.key 1024
  > /var/qmail/control/dkim/mydomain.com.txt'

  # dknewkey
/var/qmail/control/dkim/otherdomain.com.key
1024 >
/var/qmail/control/dkim/otherdomain.com.txt
  

  
  At command line change the selector in
the txt record from
'otherdomain.com.key._domainkey'  to 
'dkim1._domainkey'
  # perl -pi -e 's/^.*\.key/dkim1/'
/var/qmail/control/dkim/otherdomain.com.txt
  

  
  Check the file to see if substitution
happened.
  # cat
/var/qmail/control/dkim/otherdomain.com.txt
     dkim1._domainkey       IN      TXT   
 "k=rsa; p=**"
  

  
  

  
  Create DNS TXT record for otherdomain.com
using the output from the text file
'otherdomain.com.txt' where your DNS
settings are managed, usually your ISP (mine
are Godaddy).
     Host                               
Text
     dkim1._domainkey       IN       TXT
v=DKIM1; k=rsa; p=*
  

 

Re: [qmailtoaster] spam folder into gmail

[Chandran Manikandan]

Hi Eric,

I have done of your advise.
the below list of files

-rws--x--x 1 qmailq qmail  50K Apr 15  2014 qmail-dk
-rws--x--x 1 qmailq qmail  27K Apr 15  2014 qmail-queue

There is no link with qmail-queue and qmail-dk
 and there is no qmail-queue.orig file

and tcp.smtp file is like below.

127.:allow,RELAYCLIENT="",RBLSMTPD="",NOP0FCHECK="1"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan"

Is it my setup is okay or did i miss anything.

Thanks.

On Mon, Sep 30, 2019 at 11:05 PM Eric Broch  wrote:

> I've removed DomainKeys (not DKIM) from qmail altogether in later versions
> and decided to use a wrapper for DKIM.
>
> So,
>
> If you have below list from /var/qmail/bin
>
> # ls -l /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue.orig
> /var/qmail/bin/qmail-dk
> -rws--x--x 1 qmailq qmail 52096 Jan 21  2018 /var/qmail/bin/qmail-dk
> lrwxrwxrwx 1 root   root 23 Jun 14  2018 /var/qmail/bin/qmail-queue ->
> /var/qmail/bin/qmail-dk
> -rws--x--x 1 qmailq qmail 27040 Jan 21  2018
> /var/qmail/bin/qmail-queue.orig
>
> Stop qmail
>
> # qmailctl stop
>
> Remove symlink to qmail-dk
>
> # unlink /var/qmail/bin/qmail-queue
>
> Move qmail-queue.orig to qmail-queue
>
> # mv /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-queue
>
> Start qmail
>
> # qmailctl start
>
> Remove DKSIGN, DKVERIFY, DKQUEUE (DomainKeys) from tcp.smtp.
>
> # qmailctl cdb
>
>
> On 9/29/2019 10:56 PM, ChandranManikandan wrote:
>
> Hi Eric,
>
> Thanks for your help.
> I have successfully rectified the issue with the following your steps
> above and tested in Gmail account from squirrel webmail.
> It is working now.
>
> I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i need
> amend the lines in this file. please let me know.
>
> DKSIGN="/var/qmail/control/domainkeys/%/private"
>
> On Sun, Sep 29, 2019 at 10:47 PM Eric Broch  wrote:
>
>> Step 2) from http://www.qmailtoaster.com/dkim.html
>>
>> At the command line first create the key and txt record for the domain
>> you want signed (replace otherdomain.com with the domain you want in
>> every command below).
>> So if your domain is mydomain.com the command would be, '# dknewkey
>> /var/qmail/control/dkim/mydomain.com.key 1024 >
>> /var/qmail/control/dkim/mydomain.com.txt'
>> # dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
>> /var/qmail/control/dkim/otherdomain.com.txt
>>
>> At command line change the selector in the txt record from
>> 'otherdomain.com.key._domainkey'  to  'dkim1._domainkey'
>> # perl -pi -e 's/^.*\.key/dkim1/'
>> /var/qmail/control/dkim/otherdomain.com.txt
>>
>> Check the file to see if substitution happened.
>> # cat /var/qmail/control/dkim/otherdomain.com.txt
>>dkim1._domainkey   IN  TXT "k=rsa;
>> p=**"
>>
>>
>> Create DNS TXT record for otherdomain.com using the output from the text
>> file 'otherdomain.com.txt' where your DNS settings are managed, usually
>> your ISP (mine are Godaddy).
>>HostText
>>dkim1._domainkey   IN   TXT v=DKIM1; k=rsa;
>> p=*
>>
>> Edit the signature file and add your domain. This is what the perl script
>> 'qmail-remote' will read and then call the original qmail-remote now
>> renamed to qmail-remote.orig.
>> # vi /var/qmail/control/dkim/signconf.xml
>>   > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
>> 
>> 
>>   
>>
>> So file looks like this:
>>
>> 
>>   
>>   > keyfile="/var/qmail/control/dkim/global.key" method="simple"
>> selector="dkim1">
>> 
>>   
>>   > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
>> 
>> 
>>   
>> 
>>
>>
>> Notes Step 2) Test your DKIM signature (Remember, replace otherdomain.com
>> with your domain).
>> # yum install epel-release opendkim
>> # opendkim-testkey - -d otherdomain.com  -k
>> /var/qmail/control/dkim/otherdomain.com.key -s dkim1
>>
>> On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan 
>> wrote:
>>
>>> Hi Eric,
>>>
>>> How do i implement DKIM for my domain. Really need your help.
>>> I have followed your 1 step only. do i need to follow all the four steps
>>> and how do i configure in DNS server.
>>> why the gmail marked into spam folder of my domains emails.
>>>
>>> Appreciate discussions and help.
>>>
>>>
>>> On Fri, Sep 27, 2019 at 11:51 PM Eric Broch 
>>> wrote:
>>>
 DKIM is not DomainKeys


 On 9/27/2019 3:54 AM, ChandranManikandan wrote:

 Hi Eric,

 I have setup Global key (default for all domains)from your link and
 also configured in dns server then i checked in mxtoolbox and getting the
 result of the domain key. after that i tried to send an email to gmail it
 is showing the error. the email header is below.

 Do i need to follow the all 4 steps.

 I will wait one day for the dns propagation and will update you.
 

Re: [qmailtoaster] spam folder into gmail

[Eric Broch]

Also,

I've decided to allow Spamassassin to do DKIM (and other) checks so 
don't have to code anything.


go to page:

https://www.skelleton.net/2015/03/21/how-to-eliminate-spam-and-protect-your-name-with-dmarc/

and search for:

Know your Spam – get the most out of Spamassassin


On 9/30/2019 6:34 AM, Eric Broch wrote:


I've removed DomainKeys (not DKIM) from qmail altogether in later 
versions and decided to use a wrapper for DKIM.


So,

If you have below list from /var/qmail/bin

# ls -l /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue.orig 
/var/qmail/bin/qmail-dk

-rws--x--x 1 qmailq qmail 52096 Jan 21  2018 /var/qmail/bin/qmail-dk
lrwxrwxrwx 1 root   root 23 Jun 14  2018 
/var/qmail/bin/qmail-queue -> /var/qmail/bin/qmail-dk
-rws--x--x 1 qmailq qmail 27040 Jan 21  2018 
/var/qmail/bin/qmail-queue.orig


Stop qmail

# qmailctl stop

Remove symlink to qmail-dk

# unlink /var/qmail/bin/qmail-queue

Move qmail-queue.orig to qmail-queue

# mv /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-queue

Start qmail

# qmailctl start

Remove DKSIGN, DKVERIFY, DKQUEUE (DomainKeys) from tcp.smtp.

# qmailctl cdb


On 9/29/2019 10:56 PM, ChandranManikandan wrote:

Hi Eric,

Thanks for your help.
I have successfully rectified the issue with the following your steps 
above and tested in Gmail account from squirrel webmail.

It is working now.

I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i 
need amend the lines in this file. please let me know.


DKSIGN="/var/qmail/control/domainkeys/%/private"

On Sun, Sep 29, 2019 at 10:47 PM Eric Broch > wrote:


Step 2) from http://www.qmailtoaster.com/dkim.html

At the command line first create the key and txt record for the
domain you want signed (replace otherdomain.com
 with the domain you want in every
command below).
So if your domain is mydomain.com  the
command would be, '# dknewkey
/var/qmail/control/dkim/mydomain.com.key 1024 >
/var/qmail/control/dkim/mydomain.com.txt'
# dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
/var/qmail/control/dkim/otherdomain.com.txt

At command line change the selector in the txt record from
'otherdomain.com.key._domainkey'  to 'dkim1._domainkey'
# perl -pi -e 's/^.*\.key/dkim1/'
/var/qmail/control/dkim/otherdomain.com.txt

Check the file to see if substitution happened.
# cat /var/qmail/control/dkim/otherdomain.com.txt
   dkim1._domainkey       IN      TXT    "k=rsa;
p=**"


Create DNS TXT record for otherdomain.com
 using the output from the text file
'otherdomain.com.txt' where your DNS settings are managed,
usually your ISP (mine are Godaddy).
   Host Text
   dkim1._domainkey       IN       TXT v=DKIM1; k=rsa;
p=*

Edit the signature file and add your domain. This is what the
perl script 'qmail-remote' will read and then call the original
qmail-remote now renamed to qmail-remote.orig.
# vi /var/qmail/control/dkim/signconf.xml
  http://otherdomain.com>
domain="otherdomain.com "
keyfile="/var/qmail/control/dkim/otherdomain.com.key"
selector="dkim1">
    
    
  http://otherdomain.com>>

So file looks like this:


  
  
    
  
  http://otherdomain.com>
domain="otherdomain.com "
keyfile="/var/qmail/control/dkim/otherdomain.com.key"
selector="dkim1">
    
    
  http://otherdomain.com>>



Notes Step 2) Test your DKIM signature (Remember, replace
otherdomain.com  with your domain).
# yum install epel-release opendkim
# opendkim-testkey - -d otherdomain.com
 -k
/var/qmail/control/dkim/otherdomain.com.key -s dkim1

On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan
mailto:kand...@gmail.com>> wrote:

Hi Eric,

How do i implement DKIM for my domain. Really need your help.
I have followed your 1 step only. do i need to follow all the
four steps and how do i configure in DNS server.
why the gmail marked into spam folder of my domains emails.

Appreciate discussions and help.


On Fri, Sep 27, 2019 at 11:51 PM Eric Broch
mailto:ebr...@whitehorsetc.com>> wrote:

DKIM is not DomainKeys


On 9/27/2019 3:54 AM, ChandranManikandan wrote:

Hi Eric,

I have setup Global key (default for all domains)from
your link and also configured in dns server then i
checked in mxtoolbox and getting the result of the
domain key. after that i tried to send an email to gmail
it is showing the error. the email header is below.

Do i need to follow the all 4 steps.

 

Re: [qmailtoaster] spam folder into gmail

[Eric Broch]

I've removed DomainKeys (not DKIM) from qmail altogether in later 
versions and decided to use a wrapper for DKIM.


So,

If you have below list from /var/qmail/bin

# ls -l /var/qmail/bin/qmail-queue /var/qmail/bin/qmail-queue.orig 
/var/qmail/bin/qmail-dk

-rws--x--x 1 qmailq qmail 52096 Jan 21  2018 /var/qmail/bin/qmail-dk
lrwxrwxrwx 1 root   root 23 Jun 14  2018 /var/qmail/bin/qmail-queue 
-> /var/qmail/bin/qmail-dk

-rws--x--x 1 qmailq qmail 27040 Jan 21  2018 /var/qmail/bin/qmail-queue.orig

Stop qmail

# qmailctl stop

Remove symlink to qmail-dk

# unlink /var/qmail/bin/qmail-queue

Move qmail-queue.orig to qmail-queue

# mv /var/qmail/bin/qmail-queue.orig /var/qmail/bin/qmail-queue

Start qmail

# qmailctl start

Remove DKSIGN, DKVERIFY, DKQUEUE (DomainKeys) from tcp.smtp.

# qmailctl cdb


On 9/29/2019 10:56 PM, ChandranManikandan wrote:

Hi Eric,

Thanks for your help.
I have successfully rectified the issue with the following your steps 
above and tested in Gmail account from squirrel webmail.

It is working now.

I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i 
need amend the lines in this file. please let me know.


DKSIGN="/var/qmail/control/domainkeys/%/private"

On Sun, Sep 29, 2019 at 10:47 PM Eric Broch > wrote:


Step 2) from http://www.qmailtoaster.com/dkim.html

At the command line first create the key and txt record for the
domain you want signed (replace otherdomain.com
 with the domain you want in every command
below).
So if your domain is mydomain.com  the
command would be, '# dknewkey
/var/qmail/control/dkim/mydomain.com.key 1024 >
/var/qmail/control/dkim/mydomain.com.txt'
# dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
/var/qmail/control/dkim/otherdomain.com.txt

At command line change the selector in the txt record from
'otherdomain.com.key._domainkey'  to 'dkim1._domainkey'
# perl -pi -e 's/^.*\.key/dkim1/'
/var/qmail/control/dkim/otherdomain.com.txt

Check the file to see if substitution happened.
# cat /var/qmail/control/dkim/otherdomain.com.txt
   dkim1._domainkey       IN      TXT  "k=rsa;
p=**"


Create DNS TXT record for otherdomain.com 
using the output from the text file 'otherdomain.com.txt' where
your DNS settings are managed, usually your ISP (mine are Godaddy).
   Host Text
   dkim1._domainkey       IN       TXT v=DKIM1; k=rsa;
p=*

Edit the signature file and add your domain. This is what the perl
script 'qmail-remote' will read and then call the original
qmail-remote now renamed to qmail-remote.orig.
# vi /var/qmail/control/dkim/signconf.xml
  http://otherdomain.com>
domain="otherdomain.com "
keyfile="/var/qmail/control/dkim/otherdomain.com.key"
selector="dkim1">
    
    
  http://otherdomain.com>>

So file looks like this:


  
  
    
  
  http://otherdomain.com>
domain="otherdomain.com "
keyfile="/var/qmail/control/dkim/otherdomain.com.key"
selector="dkim1">
    
    
  http://otherdomain.com>>



Notes Step 2) Test your DKIM signature (Remember, replace
otherdomain.com  with your domain).
# yum install epel-release opendkim
# opendkim-testkey - -d otherdomain.com
 -k
/var/qmail/control/dkim/otherdomain.com.key -s dkim1

On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan
mailto:kand...@gmail.com>> wrote:

Hi Eric,

How do i implement DKIM for my domain. Really need your help.
I have followed your 1 step only. do i need to follow all the
four steps and how do i configure in DNS server.
why the gmail marked into spam folder of my domains emails.

Appreciate discussions and help.


On Fri, Sep 27, 2019 at 11:51 PM Eric Broch
mailto:ebr...@whitehorsetc.com>> wrote:

DKIM is not DomainKeys


On 9/27/2019 3:54 AM, ChandranManikandan wrote:

Hi Eric,

I have setup Global key (default for all domains)from
your link and also configured in dns server then i
checked in mxtoolbox and getting the result of the domain
key. after that i tried to send an email to gmail it is
showing the error. the email header is below.

Do i need to follow the all 4 steps.

I will wait one day for the dns propagation and will
update you.
Meanwhile could you look at the message header below.

Delivered-To:kand...@gmail.com  
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
 Fri, 27 Sep 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Remo,
This default settings are there. My doubt is do i need to replace this line
DKSIGN="/var/qmail/control/domainkeys/%/private to DKSIGN="/var/qmail/
control/dkim/%/public.txt.
Because now i am replacing the folder domainkeys to dkim.
Please correct me if i am wrong.

On Mon, Sep 30, 2019 at 1:00 PM Remo Mattei  wrote:

> here is mine
>
>
> :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private”
>
>
>
>
>
> On Sunday, Sep 29, 2019 at 21:57, ChandranManikandan 
> wrote:
> Hi Eric,
>
> Thanks for your help.
> I have successfully rectified the issue with the following your steps
> above and tested in Gmail account from squirrel webmail.
> It is working now.
>
> I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i need
> amend the lines in this file. please let me know.
>
> DKSIGN="/var/qmail/control/domainkeys/%/private"
>
> On Sun, Sep 29, 2019 at 10:47 PM Eric Broch  wrote:
>
>> Step 2) from http://www.qmailtoaster.com/dkim.html
>>
>> At the command line first create the key and txt record for the domain
>> you want signed (replace otherdomain.com with the domain you want in
>> every command below).
>> So if your domain is mydomain.com the command would be, '# dknewkey
>> /var/qmail/control/dkim/mydomain.com.key 1024 >
>> /var/qmail/control/dkim/mydomain.com.txt'
>> # dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
>> /var/qmail/control/dkim/otherdomain.com.txt
>>
>> At command line change the selector in the txt record from
>> 'otherdomain.com.key._domainkey'  to  'dkim1._domainkey'
>> # perl -pi -e 's/^.*\.key/dkim1/'
>> /var/qmail/control/dkim/otherdomain.com.txt
>>
>> Check the file to see if substitution happened.
>> # cat /var/qmail/control/dkim/otherdomain.com.txt
>>dkim1._domainkey   IN  TXT "k=rsa;
>> p=**"
>>
>>
>> Create DNS TXT record for otherdomain.com using the output from the text
>> file 'otherdomain.com.txt' where your DNS settings are managed, usually
>> your ISP (mine are Godaddy).
>>HostText
>>dkim1._domainkey   IN   TXT v=DKIM1; k=rsa;
>> p=*
>>
>> Edit the signature file and add your domain. This is what the perl script
>> 'qmail-remote' will read and then call the original qmail-remote now
>> renamed to qmail-remote.orig.
>> # vi /var/qmail/control/dkim/signconf.xml
>>   > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
>> 
>> 
>>   
>>
>> So file looks like this:
>>
>> 
>>   
>>   > keyfile="/var/qmail/control/dkim/global.key" method="simple"
>> selector="dkim1">
>> 
>>   
>>   > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
>> 
>> 
>>   
>> 
>>
>>
>> Notes Step 2) Test your DKIM signature (Remember, replace otherdomain.com
>> with your domain).
>> # yum install epel-release opendkim
>> # opendkim-testkey - -d otherdomain.com  -k
>> /var/qmail/control/dkim/otherdomain.com.key -s dkim1
>>
>> On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan 
>> wrote:
>>
>>> Hi Eric,
>>>
>>> How do i implement DKIM for my domain. Really need your help.
>>> I have followed your 1 step only. do i need to follow all the four steps
>>> and how do i configure in DNS server.
>>> why the gmail marked into spam folder of my domains emails.
>>>
>>> Appreciate discussions and help.
>>>
>>>
>>> On Fri, Sep 27, 2019 at 11:51 PM Eric Broch 
>>> wrote:
>>>
 DKIM is not DomainKeys


 On 9/27/2019 3:54 AM, ChandranManikandan wrote:

 Hi Eric,

 I have setup Global key (default for all domains)from your link and
 also configured in dns server then i checked in mxtoolbox and getting the
 result of the domain key. after that i tried to send an email to gmail it
 is showing the error. the email header is below.

 Do i need to follow the all 4 steps.

 I will wait one day for the dns propagation and will update you.
 Meanwhile could you look at the message header below.

 Delivered-To: kand...@gmail.com Received: by 2002:ac0:bf91:0:0:0:0:0 with 
 SMTP id o17csp3358759imk; Fri, 27 Sep 2019 02:46:35 -0700 (PDT) 
 X-Google-Smtp-Source: 
 APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
  X-Received: by 2002:a65:5043:: with SMTP id 
 k3mr8485146pgo.406.1569577595481; Fri, 27 Sep 2019 02:46:35 -0700 (PDT) 
 ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none; d=google.com; 
 s=arc-20160816; 
 b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg 
 YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7 
 +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX 
 KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd 

Re: [qmailtoaster] spam folder into gmail

[Remo Mattei]

here is mine

:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",NOP0FCHECK="1",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKVERIFY="DEGIJKfh",DKSIGN="/var/qmail/control/domainkeys/%/private”

> On Sunday, Sep 29, 2019 at 21:57, ChandranManikandan  (mailto:kand...@gmail.com)> wrote:
> Hi Eric,
>
> Thanks for your help.
> I have successfully rectified the issue with the following your steps above 
> and tested in Gmail account from squirrel webmail.
> It is working now.
>
> I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i need 
> amend the lines in this file. please let me know.
>
> DKSIGN="/var/qmail/control/domainkeys/%/private"
>
> On Sun, Sep 29, 2019 at 10:47 PM Eric Broch  (mailto:ebroch.w...@gmail.com)> wrote:
> > Step 2) from http://www.qmailtoaster.com/dkim.html
> >
> > At the command line first create the key and txt record for the domain you 
> > want signed (replace otherdomain.com (http://otherdomain.com) with the 
> > domain you want in every command below).
> > So if your domain is mydomain.com (http://mydomain.com) the command would 
> > be, '# dknewkey /var/qmail/control/dkim/mydomain.com.key 1024 > 
> > /var/qmail/control/dkim/mydomain.com.txt'
> > # dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 > 
> > /var/qmail/control/dkim/otherdomain.com.txt
> >
> > At command line change the selector in the txt record from 
> > 'otherdomain.com.key._domainkey' to 'dkim1._domainkey'
> > # perl -pi -e 's/^.*\.key/dkim1/' 
> > /var/qmail/control/dkim/otherdomain.com.txt
> >
> > Check the file to see if substitution happened.
> > # cat /var/qmail/control/dkim/otherdomain.com.txt
> > dkim1._domainkey IN TXT "k=rsa; p=**"
> >
> >
> > Create DNS TXT record for otherdomain.com (http://otherdomain.com) using 
> > the output from the text file 'otherdomain.com.txt' where your DNS settings 
> > are managed, usually your ISP (mine are Godaddy).
> > Host Text
> > dkim1._domainkey IN TXT v=DKIM1; k=rsa; p=*
> >
> > Edit the signature file and add your domain. This is what the perl script 
> > 'qmail-remote' will read and then call the original qmail-remote now 
> > renamed to qmail-remote.orig.
> > # vi /var/qmail/control/dkim/signconf.xml
> > http://otherdomain.com) domain="otherdomain.com 
> > (http://otherdomain.com)" 
> > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
> > 
> > 
> > http://otherdomain.com)>
> >
> > So file looks like this:
> >
> > 
> > 
> >  > keyfile="/var/qmail/control/dkim/global.key" method="simple" 
> > selector="dkim1">
> > 
> > 
> > http://otherdomain.com) domain="otherdomain.com 
> > (http://otherdomain.com)" 
> > keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
> > 
> > 
> > http://otherdomain.com)>
> > 
> >
> >
> >
> > Notes Step 2) Test your DKIM signature (Remember, replace otherdomain.com 
> > (http://otherdomain.com) with your domain).
> > # yum install epel-release opendkim
> > # opendkim-testkey - -d otherdomain.com (http://otherdomain.com) -k 
> > /var/qmail/control/dkim/otherdomain.com.key -s dkim1
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan  > (mailto:kand...@gmail.com)> wrote:
> > > Hi Eric,
> > >
> > > How do i implement DKIM for my domain. Really need your help.
> > > I have followed your 1 step only. do i need to follow all the four steps 
> > > and how do i configure in DNS server.
> > > why the gmail marked into spam folder of my domains emails.
> > >
> > > Appreciate discussions and help.
> > >
> > >
> > > On Fri, Sep 27, 2019 at 11:51 PM Eric Broch  > > (mailto:ebr...@whitehorsetc.com)> wrote:
> > > >
> > > > DKIM is not DomainKeys
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > On 9/27/2019 3:54 AM, ChandranManikandan wrote:
> > > > > Hi Eric,
> > > > >
> > > > > I have setup Global key (default for all domains)from your link and 
> > > > > also configured in dns server then i checked in mxtoolbox and getting 
> > > > > the result of the domain key. after that i tried to send an email to 
> > > > > gmail it is showing the error. the email header is below.
> > > > >
> > > > > Do i need to follow the all 4 steps.
> > > > >
> > > > > I will wait one day for the dns propagation and will update you.
> > > > > Meanwhile could you look at the message header below.
> > > > >
> > > > > Delivered-To: kand...@gmail.com (mailto:kand...@gmail.com) Received: 
> > > > > by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk; Fri, 27 Sep 
> > > > > 2019 02:46:35 -0700 (PDT) X-Google-Smtp-Source: 
> > > > > APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
> > > > >  X-Received: by 2002:a65:5043:: with SMTP id 
> > > > > k3mr8485146pgo.406.1569577595481; Fri, 27 Sep 2019 02:46:35 -0700 
> > > > > (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none; 
> > > > > d=google.com (http://google.com); 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

Thanks for your help.
I have successfully rectified the issue with the following your steps above
and tested in Gmail account from squirrel webmail.
It is working now.

I have notified in /etc/tcprules.d/tcp.smtp file in below lines. Do i need
amend the lines in this file. please let me know.

DKSIGN="/var/qmail/control/domainkeys/%/private"

On Sun, Sep 29, 2019 at 10:47 PM Eric Broch  wrote:

> Step 2) from http://www.qmailtoaster.com/dkim.html
>
> At the command line first create the key and txt record for the domain you
> want signed (replace otherdomain.com with the domain you want in every
> command below).
> So if your domain is mydomain.com the command would be, '# dknewkey
> /var/qmail/control/dkim/mydomain.com.key 1024 >
> /var/qmail/control/dkim/mydomain.com.txt'
> # dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
> /var/qmail/control/dkim/otherdomain.com.txt
>
> At command line change the selector in the txt record from
> 'otherdomain.com.key._domainkey'  to  'dkim1._domainkey'
> # perl -pi -e 's/^.*\.key/dkim1/'
> /var/qmail/control/dkim/otherdomain.com.txt
>
> Check the file to see if substitution happened.
> # cat /var/qmail/control/dkim/otherdomain.com.txt
>dkim1._domainkey   IN  TXT "k=rsa;
> p=**"
>
>
> Create DNS TXT record for otherdomain.com using the output from the text
> file 'otherdomain.com.txt' where your DNS settings are managed, usually
> your ISP (mine are Godaddy).
>HostText
>dkim1._domainkey   IN   TXT v=DKIM1; k=rsa;
> p=*
>
> Edit the signature file and add your domain. This is what the perl script
> 'qmail-remote' will read and then call the original qmail-remote now
> renamed to qmail-remote.orig.
> # vi /var/qmail/control/dkim/signconf.xml
>keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
> 
> 
>   
>
> So file looks like this:
>
> 
>   
>keyfile="/var/qmail/control/dkim/global.key" method="simple"
> selector="dkim1">
> 
>   
>keyfile="/var/qmail/control/dkim/otherdomain.com.key" selector="dkim1">
> 
> 
>   
> 
>
>
> Notes Step 2) Test your DKIM signature (Remember, replace otherdomain.com
> with your domain).
> # yum install epel-release opendkim
> # opendkim-testkey - -d otherdomain.com  -k
> /var/qmail/control/dkim/otherdomain.com.key -s dkim1
>
> On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan 
> wrote:
>
>> Hi Eric,
>>
>> How do i implement DKIM for my domain. Really need your help.
>> I have followed your 1 step only. do i need to follow all the four steps
>> and how do i configure in DNS server.
>> why the gmail marked into spam folder of my domains emails.
>>
>> Appreciate discussions and help.
>>
>>
>> On Fri, Sep 27, 2019 at 11:51 PM Eric Broch 
>> wrote:
>>
>>> DKIM is not DomainKeys
>>>
>>>
>>> On 9/27/2019 3:54 AM, ChandranManikandan wrote:
>>>
>>> Hi Eric,
>>>
>>> I have setup Global key (default for all domains)from your link and
>>> also configured in dns server then i checked in mxtoolbox and getting the
>>> result of the domain key. after that i tried to send an email to gmail it
>>> is showing the error. the email header is below.
>>>
>>> Do i need to follow the all 4 steps.
>>>
>>> I will wait one day for the dns propagation and will update you.
>>> Meanwhile could you look at the message header below.
>>>
>>> Delivered-To: kand...@gmail.com
>>> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
>>> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
>>> X-Google-Smtp-Source: 
>>> APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
>>> X-Received: by 2002:a65:5043:: with SMTP id 
>>> k3mr8485146pgo.406.1569577595481;
>>> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
>>> ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none;
>>> d=google.com; s=arc-20160816;
>>> b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg
>>>  
>>> YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7
>>>  
>>> +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX
>>>  
>>> KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd
>>>  
>>> PpWDunYjYGQJwbfUfC5APHTV6OxkiTIhVFSphLJdHu7JHF8AKOo/M4CbzYQeJTqAzvgH
>>>  zMzQ==
>>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
>>> s=arc-20160816;
>>> h=importance:content-transfer-encoding:mime-version:user-agent:to
>>>  :from:subject:date:message-id:dkim-signature;
>>> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
>>> b=Q1EqIgKIoYX1ckvl46Hs88ezj8DlGnJ7/hOBQUaBEFimABh9utR16law3oLDNmvNcD
>>>  
>>> O6LbpRcBYuwAimiplbgqWa8r7rQ0lYgbrJuZhJW1aGANQnoA9gZsNYBCIrbIlLtXNsGO
>>>  
>>> xFDWArhAVHM7oAyTjF1gAejKmnmAFgWWWV5rj9LUg02LRwWenn++FOb/8ZkMfblJktag
>>>  
>>> 

Re: [qmailtoaster] spam folder into gmail

[Eric Broch]

Step 2) from http://www.qmailtoaster.com/dkim.html

At the command line first create the key and txt record for the domain you
want signed (replace otherdomain.com with the domain you want in every
command below).
So if your domain is mydomain.com the command would be, '# dknewkey
/var/qmail/control/dkim/mydomain.com.key 1024 >
/var/qmail/control/dkim/mydomain.com.txt'
# dknewkey /var/qmail/control/dkim/otherdomain.com.key 1024 >
/var/qmail/control/dkim/otherdomain.com.txt

At command line change the selector in the txt record from
'otherdomain.com.key._domainkey'  to  'dkim1._domainkey'
# perl -pi -e 's/^.*\.key/dkim1/'
/var/qmail/control/dkim/otherdomain.com.txt

Check the file to see if substitution happened.
# cat /var/qmail/control/dkim/otherdomain.com.txt
   dkim1._domainkey   IN  TXT "k=rsa;
p=**"


Create DNS TXT record for otherdomain.com using the output from the text
file 'otherdomain.com.txt' where your DNS settings are managed, usually
your ISP (mine are Godaddy).
   HostText
   dkim1._domainkey   IN   TXT v=DKIM1; k=rsa;
p=*

Edit the signature file and add your domain. This is what the perl script
'qmail-remote' will read and then call the original qmail-remote now
renamed to qmail-remote.orig.
# vi /var/qmail/control/dkim/signconf.xml
  


  

So file looks like this:


  
  

  
  


  



Notes Step 2) Test your DKIM signature (Remember, replace otherdomain.com
with your domain).
# yum install epel-release opendkim
# opendkim-testkey - -d otherdomain.com  -k
/var/qmail/control/dkim/otherdomain.com.key -s dkim1

On Sun, Sep 29, 2019 at 7:19 AM ChandranManikandan 
wrote:

> Hi Eric,
>
> How do i implement DKIM for my domain. Really need your help.
> I have followed your 1 step only. do i need to follow all the four steps
> and how do i configure in DNS server.
> why the gmail marked into spam folder of my domains emails.
>
> Appreciate discussions and help.
>
>
> On Fri, Sep 27, 2019 at 11:51 PM Eric Broch 
> wrote:
>
>> DKIM is not DomainKeys
>>
>>
>> On 9/27/2019 3:54 AM, ChandranManikandan wrote:
>>
>> Hi Eric,
>>
>> I have setup Global key (default for all domains)from your link and also
>> configured in dns server then i checked in mxtoolbox and getting the result
>> of the domain key. after that i tried to send an email to gmail it is
>> showing the error. the email header is below.
>>
>> Do i need to follow the all 4 steps.
>>
>> I will wait one day for the dns propagation and will update you.
>> Meanwhile could you look at the message header below.
>>
>> Delivered-To: kand...@gmail.com
>> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
>> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
>> X-Google-Smtp-Source: 
>> APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
>> X-Received: by 2002:a65:5043:: with SMTP id k3mr8485146pgo.406.1569577595481;
>> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
>> ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none;
>> d=google.com; s=arc-20160816;
>> b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg
>>  YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7
>>  +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX
>>  KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd
>>  PpWDunYjYGQJwbfUfC5APHTV6OxkiTIhVFSphLJdHu7JHF8AKOo/M4CbzYQeJTqAzvgH
>>  zMzQ==
>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
>> s=arc-20160816;
>> h=importance:content-transfer-encoding:mime-version:user-agent:to
>>  :from:subject:date:message-id:dkim-signature;
>> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
>> b=Q1EqIgKIoYX1ckvl46Hs88ezj8DlGnJ7/hOBQUaBEFimABh9utR16law3oLDNmvNcD
>>  O6LbpRcBYuwAimiplbgqWa8r7rQ0lYgbrJuZhJW1aGANQnoA9gZsNYBCIrbIlLtXNsGO
>>  xFDWArhAVHM7oAyTjF1gAejKmnmAFgWWWV5rj9LUg02LRwWenn++FOb/8ZkMfblJktag
>>  a/Vq/TWD9fx8pJz1b37D7AH2ymS8rdeD0mllY3mOMnRnPYslBxoUPdEny9UXsago21sg
>>  BHQKDodcmbNmXG9IqiKmePJxTLqxLM7/M9qajfPv0lP66kstcO15jF8wTwpSMjhYCHfZ
>>  zbSg==
>> ARC-Authentication-Results: i=1; mx.google.com;
>>dkim=temperror (no key for signature) header.i=@mail.pan-asia.in 
>> header.s=dkim1 header.b=ia7qahkm;
>>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
>> designates 49.128.33.86 as permitted sender) 
>> smtp.mailfrom=m...@reliancehrconsulting.com;
>>dmarc=pass (p=NONE sp=NONE dis=NONE) 
>> header.from=reliancehrconsulting.com
>> Return-Path: 
>> Received: from mail.pan-asia.in ([49.128.33.86])
>> by mx.google.com with ESMTPS id 
>> 70si2236946plc.139.2019.09.27.02.46.34
>> for 
>> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
>> 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

How do i implement DKIM for my domain. Really need your help.
I have followed your 1 step only. do i need to follow all the four steps
and how do i configure in DNS server.
why the gmail marked into spam folder of my domains emails.

Appreciate discussions and help.


On Fri, Sep 27, 2019 at 11:51 PM Eric Broch  wrote:

> DKIM is not DomainKeys
>
>
> On 9/27/2019 3:54 AM, ChandranManikandan wrote:
>
> Hi Eric,
>
> I have setup Global key (default for all domains)from your link and also
> configured in dns server then i checked in mxtoolbox and getting the result
> of the domain key. after that i tried to send an email to gmail it is
> showing the error. the email header is below.
>
> Do i need to follow the all 4 steps.
>
> I will wait one day for the dns propagation and will update you.
> Meanwhile could you look at the message header below.
>
> Delivered-To: kand...@gmail.com
> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
> X-Google-Smtp-Source: 
> APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
> X-Received: by 2002:a65:5043:: with SMTP id k3mr8485146pgo.406.1569577595481;
> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none;
> d=google.com; s=arc-20160816;
> b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg
>  YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7
>  +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX
>  KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd
>  PpWDunYjYGQJwbfUfC5APHTV6OxkiTIhVFSphLJdHu7JHF8AKOo/M4CbzYQeJTqAzvgH
>  zMzQ==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
> s=arc-20160816;
> h=importance:content-transfer-encoding:mime-version:user-agent:to
>  :from:subject:date:message-id:dkim-signature;
> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
> b=Q1EqIgKIoYX1ckvl46Hs88ezj8DlGnJ7/hOBQUaBEFimABh9utR16law3oLDNmvNcD
>  O6LbpRcBYuwAimiplbgqWa8r7rQ0lYgbrJuZhJW1aGANQnoA9gZsNYBCIrbIlLtXNsGO
>  xFDWArhAVHM7oAyTjF1gAejKmnmAFgWWWV5rj9LUg02LRwWenn++FOb/8ZkMfblJktag
>  a/Vq/TWD9fx8pJz1b37D7AH2ymS8rdeD0mllY3mOMnRnPYslBxoUPdEny9UXsago21sg
>  BHQKDodcmbNmXG9IqiKmePJxTLqxLM7/M9qajfPv0lP66kstcO15jF8wTwpSMjhYCHfZ
>  zbSg==
> ARC-Authentication-Results: i=1; mx.google.com;
>dkim=temperror (no key for signature) header.i=@mail.pan-asia.in 
> header.s=dkim1 header.b=ia7qahkm;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Return-Path: 
> Received: from mail.pan-asia.in ([49.128.33.86])
> by mx.google.com with ESMTPS id 70si2236946plc.139.2019.09.27.02.46.34
> for 
> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
> Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
> Authentication-Results: mx.google.com;
>dkim=temperror (no key for signature) header.i=@mail.pan-asia.in 
> header.s=dkim1 header.b=ia7qahkm;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.pan-asia.in; h= 
> message-id:date:subject:from:to:mime-version:content-type 
> :content-transfer-encoding; s=dkim1; bh=/edzoYuyn17WXm8KeqcX/R+k hdQ=; 
> b=ia7qahkmumkHx2g7FdiBdtJy5mkw5k/iesJrpNPz5Xswk5VIQ8KUGC0O 
> UZPZEc+WCRME/xtYvU+JMG/86y96fy8NDbBZIOnBc9z7kp7EJxNFKt9WIowOGjpE 
> RH6TgnTeFVW8IkRXb+eTZMO8D01wK27fdffYsp1FFf43v16WBak=
> Received: (qmail 27072 invoked by uid 89); 27 Sep 2019 09:46:33 -
> Received: from unknown (HELO mail.reliancehrconsulting.com) 
> (m...@reliancehrconsulting.com@127.0.0.1)
>   by mail.pan-asia.in with ESMTPA; 27 Sep 2019 09:46:33 -
> Received: from 129.126.169.22
> (SquirrelMail authenticated user m...@reliancehrconsulting.com)
> by mail.reliancehrconsulting.com with HTTP;
> Fri, 27 Sep 2019 17:46:33 +0800
> Message-ID: 
> <21567bbff8eb0eb22d4c8b720f400d23.squir...@mail.reliancehrconsulting.com>
> Date: Fri, 27 Sep 2019 17:46:33 +0800
> Subject: test
> From: m...@reliancehrconsulting.com
> To: kand...@gmail.com
> User-Agent: SquirrelMail/1.4.22-0.qt.el6
> MIME-Version: 1.0
> Content-Type: text/plain;charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> X-Priority: 3 (Normal)
> Importance: Normal
>
> test
>
>
>
>
> On Fri, Sep 27, 2019 at 2:53 

Re: [qmailtoaster] spam folder into gmail

[Eric Broch]

DKIM is not DomainKeys


On 9/27/2019 3:54 AM, ChandranManikandan wrote:

Hi Eric,

I have setup Global key (default for all domains)from your link and 
also configured in dns server then i checked in mxtoolbox and getting 
the result of the domain key. after that i tried to send an email to 
gmail it is showing the error. the email header is below.


Do i need to follow the all 4 steps.

I will wait one day for the dns propagation and will update you.
Meanwhile could you look at the message header below.

Delivered-To:kand...@gmail.com  
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
 Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
X-Google-Smtp-Source: 
APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
X-Received: by 2002:a65:5043:: with SMTP id k3mr8485146pgo.406.1569577595481;
 Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none;
 d=google.com  ; s=arc-20160816;
 b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg
  YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7
  +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX
  KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd
  PpWDunYjYGQJwbfUfC5APHTV6OxkiTIhVFSphLJdHu7JHF8AKOo/M4CbzYQeJTqAzvgH
  zMzQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com  
; s=arc-20160816;
 h=importance:content-transfer-encoding:mime-version:user-agent:to
  :from:subject:date:message-id:dkim-signature;
 bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
 b=Q1EqIgKIoYX1ckvl46Hs88ezj8DlGnJ7/hOBQUaBEFimABh9utR16law3oLDNmvNcD
  O6LbpRcBYuwAimiplbgqWa8r7rQ0lYgbrJuZhJW1aGANQnoA9gZsNYBCIrbIlLtXNsGO
  xFDWArhAVHM7oAyTjF1gAejKmnmAFgWWWV5rj9LUg02LRwWenn++FOb/8ZkMfblJktag
  a/Vq/TWD9fx8pJz1b37D7AH2ymS8rdeD0mllY3mOMnRnPYslBxoUPdEny9UXsago21sg
  BHQKDodcmbNmXG9IqiKmePJxTLqxLM7/M9qajfPv0lP66kstcO15jF8wTwpSMjhYCHfZ
  zbSg==
ARC-Authentication-Results: i=1;mx.google.com  ;
dkim=temperror (no key for signature) header.i=@mail.pan-asia.in  
  header.s=dkim1 header.b=ia7qahkm;
spf=pass (google.com  : domain ofm...@reliancehrconsulting.com  
  designates 49.128.33.86 as permitted sender) 
smtp.mailfrom=m...@reliancehrconsulting.com  ;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com  

Return-Path: mailto:m...@reliancehrconsulting.com>>
Received: frommail.pan-asia.in    ([49.128.33.86])
 bymx.google.com    with ESMTPS id 
70si2236946plc.139.2019.09.27.02.46.34
 for mailto:kand...@gmail.com>>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
Received-SPF: pass (google.com  : domain 
ofm...@reliancehrconsulting.com    designates 
49.128.33.86 as permitted sender) client-ip=49.128.33.86;
Authentication-Results:mx.google.com  ;
dkim=temperror (no key for signature) header.i=@mail.pan-asia.in  
  header.s=dkim1 header.b=ia7qahkm;
spf=pass (google.com  : domain ofm...@reliancehrconsulting.com  
  designates 49.128.33.86 as permitted sender) 
smtp.mailfrom=m...@reliancehrconsulting.com  ;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com  

DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.pan-asia.in  
; h= 
message-id:date:subject:from:to:mime-version:content-type :content-transfer-encoding; 
s=dkim1; bh=/edzoYuyn17WXm8KeqcX/R+k hdQ=; 
b=ia7qahkmumkHx2g7FdiBdtJy5mkw5k/iesJrpNPz5Xswk5VIQ8KUGC0O 
UZPZEc+WCRME/xtYvU+JMG/86y96fy8NDbBZIOnBc9z7kp7EJxNFKt9WIowOGjpE 
RH6TgnTeFVW8IkRXb+eTZMO8D01wK27fdffYsp1FFf43v16WBak=
Received: (qmail 27072 invoked by uid 89); 27 Sep 2019 09:46:33 -
Received: from unknown (HELOmail.reliancehrconsulting.com  
) (m...@reliancehrconsulting.com@127.0.0.1  
)
   bymail.pan-asia.in    with ESMTPA; 27 Sep 2019 
09:46:33 -
Received: from 129.126.169.22
 (SquirrelMail authenticated userm...@reliancehrconsulting.com  
)
 bymail.reliancehrconsulting.com  
  with HTTP;
 Fri, 27 Sep 2019 17:46:33 +0800
Message-ID: 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

I have setup Global key (default for all domains)from your link and also
configured in dns server then i checked in mxtoolbox and getting the result
of the domain key. after that i tried to send an email to gmail it is
showing the error. the email header is below.

Do i need to follow the all 4 steps.

I will wait one day for the dns propagation and will update you.
Meanwhile could you look at the message header below.

Delivered-To: kand...@gmail.com
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp3358759imk;
Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
X-Google-Smtp-Source:
APXvYqxHJMofBlzODo5fRYA7j7xd5qZEt0t2DjgnfAXGA8ChxXq9w+4D0NB8ME1egn3uV3gOsfgn
X-Received: by 2002:a65:5043:: with SMTP id k3mr8485146pgo.406.1569577595481;
Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1569577595; cv=none;
d=google.com; s=arc-20160816;
b=RFuQ52Ha1QndJ/rcALmW4+lfa1pnwK/ZJkH9jaupESEWm1/PtRA9kZyafMuPBecpAg
 YV9EeqVPixu33bKBCJejpSjM11/GACFlCwfR8pNZA43LWBNH+DhzvduVAFdrtUB0f8c7
 +QQxKJQ/hX9Lfjk9AdGzMAUITK23naokgpUGdThCz1pfKgweBZW0TZWbvPdUZp+5FjlX
 KhldCT1Q76+5Ec5SuxOqmqDpqxsJ8KZRAAdQs6IFm5/wGzrVyH2V7f4aB/AsqKuEtiRd
 PpWDunYjYGQJwbfUfC5APHTV6OxkiTIhVFSphLJdHu7JHF8AKOo/M4CbzYQeJTqAzvgH
 zMzQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
h=importance:content-transfer-encoding:mime-version:user-agent:to
 :from:subject:date:message-id:dkim-signature;
bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
b=Q1EqIgKIoYX1ckvl46Hs88ezj8DlGnJ7/hOBQUaBEFimABh9utR16law3oLDNmvNcD
 O6LbpRcBYuwAimiplbgqWa8r7rQ0lYgbrJuZhJW1aGANQnoA9gZsNYBCIrbIlLtXNsGO
 xFDWArhAVHM7oAyTjF1gAejKmnmAFgWWWV5rj9LUg02LRwWenn++FOb/8ZkMfblJktag
 a/Vq/TWD9fx8pJz1b37D7AH2ymS8rdeD0mllY3mOMnRnPYslBxoUPdEny9UXsago21sg
 BHQKDodcmbNmXG9IqiKmePJxTLqxLM7/M9qajfPv0lP66kstcO15jF8wTwpSMjhYCHfZ
 zbSg==
ARC-Authentication-Results: i=1; mx.google.com;
   dkim=temperror (no key for signature)
header.i=@mail.pan-asia.in header.s=dkim1 header.b=ia7qahkm;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com
designates 49.128.33.86 as permitted sender)
smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com
Return-Path: 
Received: from mail.pan-asia.in ([49.128.33.86])
by mx.google.com with ESMTPS id 70si2236946plc.139.2019.09.27.02.46.34
for 
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 27 Sep 2019 02:46:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of
m...@reliancehrconsulting.com designates 49.128.33.86 as permitted
sender) client-ip=49.128.33.86;
Authentication-Results: mx.google.com;
   dkim=temperror (no key for signature)
header.i=@mail.pan-asia.in header.s=dkim1 header.b=ia7qahkm;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com
designates 49.128.33.86 as permitted sender)
smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com
DKIM-Signature: v=1; a=rsa-sha1; c=simple; d=mail.pan-asia.in; h=
message-id:date:subject:from:to:mime-version:content-type
:content-transfer-encoding; s=dkim1; bh=/edzoYuyn17WXm8KeqcX/R+k hdQ=;
b=ia7qahkmumkHx2g7FdiBdtJy5mkw5k/iesJrpNPz5Xswk5VIQ8KUGC0O
UZPZEc+WCRME/xtYvU+JMG/86y96fy8NDbBZIOnBc9z7kp7EJxNFKt9WIowOGjpE
RH6TgnTeFVW8IkRXb+eTZMO8D01wK27fdffYsp1FFf43v16WBak=
Received: (qmail 27072 invoked by uid 89); 27 Sep 2019 09:46:33 -
Received: from unknown (HELO mail.reliancehrconsulting.com)
(m...@reliancehrconsulting.com@127.0.0.1)
  by mail.pan-asia.in with ESMTPA; 27 Sep 2019 09:46:33 -
Received: from 129.126.169.22
(SquirrelMail authenticated user m...@reliancehrconsulting.com)
by mail.reliancehrconsulting.com with HTTP;
Fri, 27 Sep 2019 17:46:33 +0800
Message-ID: 
<21567bbff8eb0eb22d4c8b720f400d23.squir...@mail.reliancehrconsulting.com>
Date: Fri, 27 Sep 2019 17:46:33 +0800
Subject: test
From: m...@reliancehrconsulting.com
To: kand...@gmail.com
User-Agent: SquirrelMail/1.4.22-0.qt.el6
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

test




On Fri, Sep 27, 2019 at 2:53 PM Eric's mail  wrote:

> http://www.qmailtoaster.com/dkim.html
>
> Get Outlook for Android 
>
>
>
>
> On Thu, Sep 26, 2019 at 10:41 PM -0600, "ChandranManikandan" <
> kand...@gmail.com> wrote:
>
> Hi Andy,
>>
>> I have installed DKIM in our server and there is private and public key
>> on our server.
>> I have added the public like below in our dns hosting provider (Godaddy)
>> control panel
>>
>> TXT
>> Host: rhc._domainkey.domainname
>> TXT value:  k=rsa; p=private key
>> TTL 1 hour
>>
>> But it's not signed in the email.
>>
>> I have configured MX,SPF,DMARC and DKIM in DNS 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

I have used this link http://wiki.qmailtoaster.com/index.php/Domainkeys when
i installed qmailtoaster on my machine earlier.

On Fri, Sep 27, 2019 at 3:36 PM ChandranManikandan 
wrote:

> Hi Eric,
>
> Thanks for sharing the link for domainkey.
> I have already installed domainkey from older qmailtoaster with domainkeys
> folder under /var/qmail/control/domainkeys.
> Do i need to reinstall as per your guidance?
> http://www.qmailtoaster.com/dkim.html
> Is it suit for centos 6.7 32 and 64 bit.
>
>
> On Fri, Sep 27, 2019 at 2:53 PM Eric's mail 
> wrote:
>
>> http://www.qmailtoaster.com/dkim.html
>>
>> Get Outlook for Android 
>>
>>
>>
>>
>> On Thu, Sep 26, 2019 at 10:41 PM -0600, "ChandranManikandan" <
>> kand...@gmail.com> wrote:
>>
>> Hi Andy,
>>>
>>> I have installed DKIM in our server and there is private and public key
>>> on our server.
>>> I have added the public like below in our dns hosting provider (Godaddy)
>>> control panel
>>>
>>> TXT
>>> Host: rhc._domainkey.domainname
>>> TXT value:  k=rsa; p=private key
>>> TTL 1 hour
>>>
>>> But it's not signed in the email.
>>>
>>> I have configured MX,SPF,DMARC and DKIM in DNS server settings.
>>>
>>> Did i made a mistake in DNS settings?
>>>
>>> Could you help me
>>>
>>> On Fri, Sep 27, 2019 at 11:50 AM Andrew Swartz 
>>> wrote:
>>>
 Your email does not contain a DKIM signature.

 The ARC* headers are signatures added by gmail after receipt.

 If you had a DKIM signature, it would be below this part of the header
 chain:

 Received: from mail.pan-asia.in ([49.128.33.86])
 by mx.google.com with ESMTPS id 
 t6si1129421pgt.557.2019.09.25.21.12.54
 for 
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
 Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
 designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
 Authentication-Results: mx.google.com;
spf=pass (google.com: domain of m...@reliancehrconsulting.com 
 designates 49.128.33.86 as permitted sender) 
 smtp.mailfrom=m...@reliancehrconsulting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) 
 header.from=reliancehrconsulting.com


 That and everything above it was added by gmail.

 You may have set up the DNS part of DKIM, but your server does not seem
 to be signing the emails.

 When you get it working, you can test by sending an email to a
 reflector, like this:

 sa-t...@sendmail.net

 It will analyze the smtp session and the email and then email the
 results back to you.

 There are several other reflectors listed at the bottom of this page:


 https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118571-technote-esa-00.html


 Hope this helps,

 -Andy



 On 9/25/2019 8:39 PM, ChandranManikandan wrote:

 Hi Friends,

 I have tried to send an test email from my domain to gmail.
 It is going the gmail spam folder and i have configured SPF and DMARC
 in dns.

 Could you look at the below message header in gmail and help me to
 solve this problem.

 Delivered-To: kand...@gmail.com
 Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
 X-Google-Smtp-Source: 
 APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
 X-Received: by 2002:a63:1720:: with SMTP id 
 x32mr1332168pgl.289.1569471175444;
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
 ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
 d=google.com; s=arc-20160816;
 
 b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
  
 a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
  
 bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
  
 dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
  
 JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
  g6Ng==
 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
 s=arc-20160816;
 
 h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
  :from:subject:date:message-id;
 bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
 
 b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
  
 5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
  
 /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
  
 VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
  
 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Eric,

Thanks for sharing the link for domainkey.
I have already installed domainkey from older qmailtoaster with domainkeys
folder under /var/qmail/control/domainkeys.
Do i need to reinstall as per your guidance?
http://www.qmailtoaster.com/dkim.html
Is it suit for centos 6.7 32 and 64 bit.


On Fri, Sep 27, 2019 at 2:53 PM Eric's mail  wrote:

> http://www.qmailtoaster.com/dkim.html
>
> Get Outlook for Android 
>
>
>
>
> On Thu, Sep 26, 2019 at 10:41 PM -0600, "ChandranManikandan" <
> kand...@gmail.com> wrote:
>
> Hi Andy,
>>
>> I have installed DKIM in our server and there is private and public key
>> on our server.
>> I have added the public like below in our dns hosting provider (Godaddy)
>> control panel
>>
>> TXT
>> Host: rhc._domainkey.domainname
>> TXT value:  k=rsa; p=private key
>> TTL 1 hour
>>
>> But it's not signed in the email.
>>
>> I have configured MX,SPF,DMARC and DKIM in DNS server settings.
>>
>> Did i made a mistake in DNS settings?
>>
>> Could you help me
>>
>> On Fri, Sep 27, 2019 at 11:50 AM Andrew Swartz 
>> wrote:
>>
>>> Your email does not contain a DKIM signature.
>>>
>>> The ARC* headers are signatures added by gmail after receipt.
>>>
>>> If you had a DKIM signature, it would be below this part of the header
>>> chain:
>>>
>>> Received: from mail.pan-asia.in ([49.128.33.86])
>>> by mx.google.com with ESMTPS id 
>>> t6si1129421pgt.557.2019.09.25.21.12.54
>>> for 
>>> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>>> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
>>> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
>>> Authentication-Results: mx.google.com;
>>>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
>>> designates 49.128.33.86 as permitted sender) 
>>> smtp.mailfrom=m...@reliancehrconsulting.com;
>>>dmarc=pass (p=NONE sp=NONE dis=NONE) 
>>> header.from=reliancehrconsulting.com
>>>
>>>
>>> That and everything above it was added by gmail.
>>>
>>> You may have set up the DNS part of DKIM, but your server does not seem
>>> to be signing the emails.
>>>
>>> When you get it working, you can test by sending an email to a
>>> reflector, like this:
>>>
>>> sa-t...@sendmail.net
>>>
>>> It will analyze the smtp session and the email and then email the
>>> results back to you.
>>>
>>> There are several other reflectors listed at the bottom of this page:
>>>
>>>
>>> https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118571-technote-esa-00.html
>>>
>>>
>>> Hope this helps,
>>>
>>> -Andy
>>>
>>>
>>>
>>> On 9/25/2019 8:39 PM, ChandranManikandan wrote:
>>>
>>> Hi Friends,
>>>
>>> I have tried to send an test email from my domain to gmail.
>>> It is going the gmail spam folder and i have configured SPF and DMARC in
>>> dns.
>>>
>>> Could you look at the below message header in gmail and help me to solve
>>> this problem.
>>>
>>> Delivered-To: kand...@gmail.com
>>> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
>>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>>> X-Google-Smtp-Source: 
>>> APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
>>> X-Received: by 2002:a63:1720:: with SMTP id 
>>> x32mr1332168pgl.289.1569471175444;
>>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>>> ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
>>> d=google.com; s=arc-20160816;
>>> b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
>>>  
>>> a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
>>>  
>>> bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
>>>  
>>> dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
>>>  
>>> JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
>>>  g6Ng==
>>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
>>> s=arc-20160816;
>>> h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
>>>  :from:subject:date:message-id;
>>> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
>>> b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
>>>  
>>> 5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
>>>  
>>> /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
>>>  
>>> VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
>>>  
>>> hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
>>>  vIpg==
>>> ARC-Authentication-Results: i=1; mx.google.com;
>>>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
>>> designates 49.128.33.86 as permitted sender) 
>>> smtp.mailfrom=m...@reliancehrconsulting.com;
>>>dmarc=pass (p=NONE sp=NONE dis=NONE) 
>>> 

Re: [qmailtoaster] spam folder into gmail

[Eric's mail]

http://www.qmailtoaster.com/dkim.html




Get Outlook for Android







On Thu, Sep 26, 2019 at 10:41 PM -0600, "ChandranManikandan" 
 wrote:










Hi Andy,
I have installed DKIM in our server and there is private and public key on our 
server.I have added the public like below in our dns hosting provider (Godaddy) 
control panel
TXTHost: rhc._domainkey.domainnameTXT value:  k=rsa; p=private keyTTL 1 hour
But it's not signed in the email.
I have configured MX,SPF,DMARC and DKIM in DNS server settings.
Did i made a mistake in DNS settings?
Could you help me
On Fri, Sep 27, 2019 at 11:50 AM Andrew Swartz  wrote:

  

  
  


Your email does not contain a DKIM signature.


The ARC* headers are signatures added by gmail after receipt.


If you had a DKIM signature, it would be below this part of the
  header chain:
Received: from mail.pan-asia.in ([49.128.33.86])
by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
for 
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
Authentication-Results: mx.google.com;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com designates 
49.128.33.86 as permitted sender) smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com







That and everything above it was added by gmail.


You may have set up the DNS part of DKIM, but your server does
  not seem to be signing the emails.


When you get it working, you can test by sending an email to a
  reflector, like this:


sa-t...@sendmail.net


It will analyze the smtp session and the email and then email the
  results back to you.  




There are several other reflectors listed at the bottom of this
  page:  




https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118571-technote-esa-00.html







Hope this helps,


-Andy










On 9/25/2019 8:39 PM,
  ChandranManikandan wrote:



  
  Hi Friends,



I have tried to send an test email from my domain to gmail.
It is going the gmail spam folder and i have configured SPF
  and DMARC in dns.



Could you look at the below message header in gmail and
  help me to solve this problem.

  Delivered-To: kand...@gmail.com
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
X-Google-Smtp-Source: 
APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
d=google.com; s=arc-20160816;
b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
 a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
 bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
 dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
 JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
 g6Ng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
s=arc-20160816;
h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
 :from:subject:date:message-id;
bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
 5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
 /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
 VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
 hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
 vIpg==
ARC-Authentication-Results: i=1; mx.google.com;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com designates 
49.128.33.86 as permitted sender) smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com
Return-Path: 
Received: from mail.pan-asia.in ([49.128.33.86])
by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
for 
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
Authentication-Results: mx.google.com;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Andy,

I have installed DKIM in our server and there is private and public key on
our server.
I have added the public like below in our dns hosting provider (Godaddy)
control panel

TXT
Host: rhc._domainkey.domainname
TXT value:  k=rsa; p=private key
TTL 1 hour

But it's not signed in the email.

I have configured MX,SPF,DMARC and DKIM in DNS server settings.

Did i made a mistake in DNS settings?

Could you help me

On Fri, Sep 27, 2019 at 11:50 AM Andrew Swartz 
wrote:

> Your email does not contain a DKIM signature.
>
> The ARC* headers are signatures added by gmail after receipt.
>
> If you had a DKIM signature, it would be below this part of the header
> chain:
>
> Received: from mail.pan-asia.in ([49.128.33.86])
> by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
> for 
> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
> Authentication-Results: mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
>
>
> That and everything above it was added by gmail.
>
> You may have set up the DNS part of DKIM, but your server does not seem to
> be signing the emails.
>
> When you get it working, you can test by sending an email to a reflector,
> like this:
>
> sa-t...@sendmail.net
>
> It will analyze the smtp session and the email and then email the results
> back to you.
>
> There are several other reflectors listed at the bottom of this page:
>
>
> https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118571-technote-esa-00.html
>
>
> Hope this helps,
>
> -Andy
>
>
>
> On 9/25/2019 8:39 PM, ChandranManikandan wrote:
>
> Hi Friends,
>
> I have tried to send an test email from my domain to gmail.
> It is going the gmail spam folder and i have configured SPF and DMARC in
> dns.
>
> Could you look at the below message header in gmail and help me to solve
> this problem.
>
> Delivered-To: kand...@gmail.com
> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> X-Google-Smtp-Source: 
> APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
> X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
> d=google.com; s=arc-20160816;
> b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
>  a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
>  bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
>  dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
>  JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
>  g6Ng==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
> s=arc-20160816;
> h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
>  :from:subject:date:message-id;
> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
> b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
>  5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
>  /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
>  VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
>  hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
>  vIpg==
> ARC-Authentication-Results: i=1; mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Return-Path: 
> Received: from mail.pan-asia.in ([49.128.33.86])
> by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
> for 
> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
> Authentication-Results: mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Received: (qmail 11583 invoked by uid 89); 26 Sep 2019 04:12:53 -
> Received: from 

Re: [qmailtoaster] spam folder into gmail

[Andrew Swartz]

Your email does not contain a DKIM signature.

The ARC* headers are signatures added by gmail after receipt.

If you had a DKIM signature, it would be below this part of the header 
chain:


Received: frommail.pan-asia.in    ([49.128.33.86])
bymx.google.com    with ESMTPS id 
t6si1129421pgt.557.2019.09.25.21.12.54
for mailto:kand...@gmail.com>>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
Received-SPF: pass (google.com  : domain 
ofm...@reliancehrconsulting.com    designates 
49.128.33.86 as permitted sender) client-ip=49.128.33.86;
Authentication-Results:mx.google.com  ;
   spf=pass (google.com  : domain ofm...@reliancehrconsulting.com  
  designates 49.128.33.86 as permitted sender) 
smtp.mailfrom=m...@reliancehrconsulting.com  ;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com  



That and everything above it was added by gmail.

You may have set up the DNS part of DKIM, but your server does not seem 
to be signing the emails.


When you get it working, you can test by sending an email to a 
reflector, like this:


sa-t...@sendmail.net 

It will analyze the smtp session and the email and then email the 
results back to you.


There are several other reflectors listed at the bottom of this page:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118571-technote-esa-00.html


Hope this helps,

-Andy



On 9/25/2019 8:39 PM, ChandranManikandan wrote:

Hi Friends,

I have tried to send an test email from my domain to gmail.
It is going the gmail spam folder and i have configured SPF and DMARC 
in dns.


Could you look at the below message header in gmail and help me to 
solve this problem.

Delivered-To:kand...@gmail.com  
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
X-Google-Smtp-Source: 
APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
 d=google.com  ; s=arc-20160816;
 b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
  a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
  bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
  dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
  JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
  g6Ng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com  
; s=arc-20160816;
 h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
  :from:subject:date:message-id;
 bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
 b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
  5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
  /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
  VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
  hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
  vIpg==
ARC-Authentication-Results: i=1;mx.google.com  ;
spf=pass (google.com  : domain ofm...@reliancehrconsulting.com  
  designates 49.128.33.86 as permitted sender) 
smtp.mailfrom=m...@reliancehrconsulting.com  ;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com  

Return-Path: mailto:m...@reliancehrconsulting.com>>
Received: frommail.pan-asia.in    ([49.128.33.86])
 bymx.google.com    with ESMTPS id 
t6si1129421pgt.557.2019.09.25.21.12.54
 for mailto:kand...@gmail.com>>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
Received-SPF: pass (google.com  : domain 
ofm...@reliancehrconsulting.com    designates 
49.128.33.86 as permitted sender) client-ip=49.128.33.86;
Authentication-Results:mx.google.com  ;
spf=pass (google.com  : domain ofm...@reliancehrconsulting.com  
  designates 49.128.33.86 as permitted sender) 

Re: [qmailtoaster] spam folder into gmail

[ChandranManikandan]

How do i check both the IP reputation and dkim. Could you help me with that?

On Thu, Sep 26, 2019, 2:13 PM Tahnan Al Anas  wrote:

> Also check ip reputation in talos
>
> On Thu, 26 Sep 2019, 10:40 am ChandranManikandan, 
> wrote:
>
>> Hi Friends,
>>
>> I have tried to send an test email from my domain to gmail.
>> It is going the gmail spam folder and i have configured SPF and DMARC in
>> dns.
>>
>> Could you look at the below message header in gmail and help me to solve
>> this problem.
>>
>> Delivered-To: kand...@gmail.com
>> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>> X-Google-Smtp-Source: 
>> APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
>> X-Received: by 2002:a63:1720:: with SMTP id 
>> x32mr1332168pgl.289.1569471175444;
>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>> ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
>> d=google.com; s=arc-20160816;
>> b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
>>  a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
>>  bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
>>  dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
>>  JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
>>  g6Ng==
>> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
>> s=arc-20160816;
>> h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
>>  :from:subject:date:message-id;
>> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
>> b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
>>  5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
>>  /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
>>  VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
>>  hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
>>  vIpg==
>> ARC-Authentication-Results: i=1; mx.google.com;
>>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
>> designates 49.128.33.86 as permitted sender) 
>> smtp.mailfrom=m...@reliancehrconsulting.com;
>>dmarc=pass (p=NONE sp=NONE dis=NONE) 
>> header.from=reliancehrconsulting.com
>> Return-Path: 
>> Received: from mail.pan-asia.in ([49.128.33.86])
>> by mx.google.com with ESMTPS id 
>> t6si1129421pgt.557.2019.09.25.21.12.54
>> for 
>> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
>> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
>> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
>> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
>> Authentication-Results: mx.google.com;
>>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
>> designates 49.128.33.86 as permitted sender) 
>> smtp.mailfrom=m...@reliancehrconsulting.com;
>>dmarc=pass (p=NONE sp=NONE dis=NONE) 
>> header.from=reliancehrconsulting.com
>> Received: (qmail 11583 invoked by uid 89); 26 Sep 2019 04:12:53 -
>> Received: from unknown (HELO mail.reliancehrconsulting.com) 
>> (m...@reliancehrconsulting.com@127.0.0.1)
>>   by mail.pan-asia.in with ESMTPA; 26 Sep 2019 04:12:53 -
>> Received: from 129.126.169.22
>> (SquirrelMail authenticated user m...@reliancehrconsulting.com)
>> by mail.reliancehrconsulting.com with HTTP;
>> Thu, 26 Sep 2019 12:12:53 +0800
>> Message-ID: 
>> 
>> Date: Thu, 26 Sep 2019 12:12:53 +0800
>> Subject: test
>> From: m...@reliancehrconsulting.com
>> To: kand...@gmail.com
>> Cc: m...@reliancehrconsulting.com
>> User-Agent: SquirrelMail/1.4.22-0.qt.el6
>> MIME-Version: 1.0
>> Content-Type: text/plain;charset=iso-8859-1
>> Content-Transfer-Encoding: 8bit
>> X-Priority: 3 (Normal)
>> Importance: Normal
>>
>> test
>>
>>
>>
>>
>> --
>>
>>
>> *Regards,Manikandan.C*
>>
>

Re: [qmailtoaster] spam folder into gmail

[Tahnan Al Anas]

Also check ip reputation in talos

On Thu, 26 Sep 2019, 10:40 am ChandranManikandan,  wrote:

> Hi Friends,
>
> I have tried to send an test email from my domain to gmail.
> It is going the gmail spam folder and i have configured SPF and DMARC in
> dns.
>
> Could you look at the below message header in gmail and help me to solve
> this problem.
>
> Delivered-To: kand...@gmail.com
> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> X-Google-Smtp-Source: 
> APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
> X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
> d=google.com; s=arc-20160816;
> b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
>  a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
>  bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
>  dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
>  JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
>  g6Ng==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
> s=arc-20160816;
> h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
>  :from:subject:date:message-id;
> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
> b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
>  5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
>  /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
>  VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
>  hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
>  vIpg==
> ARC-Authentication-Results: i=1; mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Return-Path: 
> Received: from mail.pan-asia.in ([49.128.33.86])
> by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
> for 
> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
> Authentication-Results: mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Received: (qmail 11583 invoked by uid 89); 26 Sep 2019 04:12:53 -
> Received: from unknown (HELO mail.reliancehrconsulting.com) 
> (m...@reliancehrconsulting.com@127.0.0.1)
>   by mail.pan-asia.in with ESMTPA; 26 Sep 2019 04:12:53 -
> Received: from 129.126.169.22
> (SquirrelMail authenticated user m...@reliancehrconsulting.com)
> by mail.reliancehrconsulting.com with HTTP;
> Thu, 26 Sep 2019 12:12:53 +0800
> Message-ID: 
> 
> Date: Thu, 26 Sep 2019 12:12:53 +0800
> Subject: test
> From: m...@reliancehrconsulting.com
> To: kand...@gmail.com
> Cc: m...@reliancehrconsulting.com
> User-Agent: SquirrelMail/1.4.22-0.qt.el6
> MIME-Version: 1.0
> Content-Type: text/plain;charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> X-Priority: 3 (Normal)
> Importance: Normal
>
> test
>
>
>
>
> --
>
>
> *Regards,Manikandan.C*
>

Re: [qmailtoaster] spam folder into gmail

[Tahnan Al Anas]

Can you check dkim?

On Thu, 26 Sep 2019, 10:40 am ChandranManikandan,  wrote:

> Hi Friends,
>
> I have tried to send an test email from my domain to gmail.
> It is going the gmail spam folder and i have configured SPF and DMARC in
> dns.
>
> Could you look at the below message header in gmail and help me to solve
> this problem.
>
> Delivered-To: kand...@gmail.com
> Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> X-Google-Smtp-Source: 
> APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
> X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
> d=google.com; s=arc-20160816;
> b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
>  a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
>  bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
>  dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
>  JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
>  g6Ng==
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; 
> s=arc-20160816;
> h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
>  :from:subject:date:message-id;
> bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
> b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
>  5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
>  /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
>  VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
>  hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
>  vIpg==
> ARC-Authentication-Results: i=1; mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Return-Path: 
> Received: from mail.pan-asia.in ([49.128.33.86])
> by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
> for 
> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
> Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
> Received-SPF: pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) client-ip=49.128.33.86;
> Authentication-Results: mx.google.com;
>spf=pass (google.com: domain of m...@reliancehrconsulting.com 
> designates 49.128.33.86 as permitted sender) 
> smtp.mailfrom=m...@reliancehrconsulting.com;
>dmarc=pass (p=NONE sp=NONE dis=NONE) 
> header.from=reliancehrconsulting.com
> Received: (qmail 11583 invoked by uid 89); 26 Sep 2019 04:12:53 -
> Received: from unknown (HELO mail.reliancehrconsulting.com) 
> (m...@reliancehrconsulting.com@127.0.0.1)
>   by mail.pan-asia.in with ESMTPA; 26 Sep 2019 04:12:53 -
> Received: from 129.126.169.22
> (SquirrelMail authenticated user m...@reliancehrconsulting.com)
> by mail.reliancehrconsulting.com with HTTP;
> Thu, 26 Sep 2019 12:12:53 +0800
> Message-ID: 
> 
> Date: Thu, 26 Sep 2019 12:12:53 +0800
> Subject: test
> From: m...@reliancehrconsulting.com
> To: kand...@gmail.com
> Cc: m...@reliancehrconsulting.com
> User-Agent: SquirrelMail/1.4.22-0.qt.el6
> MIME-Version: 1.0
> Content-Type: text/plain;charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> X-Priority: 3 (Normal)
> Importance: Normal
>
> test
>
>
>
>
> --
>
>
> *Regards,Manikandan.C*
>

[qmailtoaster] spam folder into gmail

[ChandranManikandan]

Hi Friends,

I have tried to send an test email from my domain to gmail.
It is going the gmail spam folder and i have configured SPF and DMARC in
dns.

Could you look at the below message header in gmail and help me to solve
this problem.

Delivered-To: kand...@gmail.com
Received: by 2002:ac0:bf91:0:0:0:0:0 with SMTP id o17csp1656435imk;
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
X-Google-Smtp-Source:
APXvYqxiLedyv3u6JDrnZQHvyrvIcmrH9n2kSrdj3NOCigD3cs53Rm6tgsJPdMbI9UBNqbqOc1Hz
X-Received: by 2002:a63:1720:: with SMTP id x32mr1332168pgl.289.1569471175444;
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1569471175; cv=none;
d=google.com; s=arc-20160816;
b=JGxA7PMxFt1qrwUPb9SXj40SHUhyOOPo+pENSvAaYhLkzdijEWpCgu5KWAW3yEfvWA
 a2+Q9sPT9qJQZlwFvFmH4ZRi20KCLo9RMvbkRSW3L/L8Lzztic/OCfj2+o1HKmCKl4gk
 bPWD4Tv9a/0Zg+EqIFUgJD0QhpFnSXMHmw59RoD3EurAA7zex+55NNRdnS2o7aluru0U
 dYI9xixpZd276FwfDDy+FLSh5EYuYTmjkXEMEgmbNCMhGQ5WQ9AASzwVyDbXhFt9ixSN
 JB8MKPw3P8cDyX/+Db1WoflU82H2KbVV+ON4GFhrvDVYkpQiWHbASNVipQfPj2YSItPP
 g6Ng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=arc-20160816;
h=importance:content-transfer-encoding:mime-version:user-agent:cc:to
 :from:subject:date:message-id;
bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=;
b=XDv2dnoYR6tpeltyJ8tD82IKUIGCs0888LAX5xt4MqpL8IPAcUqA8xYLJvNx+heJH/
 5xT0tBciuRolqjCA7jRI2BSSTGmO7wKoEuuL8uvaYfpxM+7eGTNpnIV0mLH3V9z7SUr0
 /Wcr/O3KstHzBxoYgAc71UguXyLG6LarOFgjcxvpVh4k3FbMKXJy+7wDDJC5zCfAcSQr
 VrmJqYWJsc4VcgFrs0+O024BqMmlrLn5WycmtpLAZ0LP/tflbx4OzMMoL+K3AvpIdccB
 hHtkCIyNislpUv6EqxxZLvumM2ysFL4Dd7M06ZpBxm5gIA3HVOL33E7JY2YQefIHv/io
 vIpg==
ARC-Authentication-Results: i=1; mx.google.com;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com
designates 49.128.33.86 as permitted sender)
smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com
Return-Path: 
Received: from mail.pan-asia.in ([49.128.33.86])
by mx.google.com with ESMTPS id t6si1129421pgt.557.2019.09.25.21.12.54
for 
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Sep 2019 21:12:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of
m...@reliancehrconsulting.com designates 49.128.33.86 as permitted
sender) client-ip=49.128.33.86;
Authentication-Results: mx.google.com;
   spf=pass (google.com: domain of m...@reliancehrconsulting.com
designates 49.128.33.86 as permitted sender)
smtp.mailfrom=m...@reliancehrconsulting.com;
   dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=reliancehrconsulting.com
Received: (qmail 11583 invoked by uid 89); 26 Sep 2019 04:12:53 -
Received: from unknown (HELO mail.reliancehrconsulting.com)
(m...@reliancehrconsulting.com@127.0.0.1)
  by mail.pan-asia.in with ESMTPA; 26 Sep 2019 04:12:53 -
Received: from 129.126.169.22
(SquirrelMail authenticated user m...@reliancehrconsulting.com)
by mail.reliancehrconsulting.com with HTTP;
Thu, 26 Sep 2019 12:12:53 +0800
Message-ID: 

Date: Thu, 26 Sep 2019 12:12:53 +0800
Subject: test
From: m...@reliancehrconsulting.com
To: kand...@gmail.com
Cc: m...@reliancehrconsulting.com
User-Agent: SquirrelMail/1.4.22-0.qt.el6
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

test




-- 


*Regards,Manikandan.C*

[qmailtoaster] spam with clients names before the @

[Tony White]

Hi all,
  Will spamdyke, using blacklist_senders, block spam
with names rather than names and domains or just
domains.
  I am seeing an increase in spam with clients names
ie peterg...@adomain.com rather than his original
email address.
  Also how do you all feel about implementing blocking
using level 6?

--
best wishes
  Tony White

Yea Computing Services
http://www.ycs.com.au
4 The Crescent
Yea
Victoria
Australia 3717

Telephone No's
VIC : 03 9008 5614
FAX : 03 9008 5610 (FAX2Email)

Be aware: All calls to and from YCS landlines and mobiles are recorded

IMPORTANT NOTICE

This communication including any file attachments is intended solely for
the use of the individual or entity to whom it is addressed. If you are
not the intended recipient, or the person responsible for delivering
this communication to the intended recipient, please immediately notify
the sender by email and delete the original transmission and its
contents. Any unauthorised use, dissemination, forwarding, printing or
copying of this communication including file attachments is prohibited.
It is your responsibility to scan this communication including any file
attachments for viruses and other defects. To the extent permitted by
law, Yea Computing Services and its associates will not be liable for
any loss or damage arising in any way from this communication including
any file attachments.
You may not disclose this information to a third party without written
permission from the Author.


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam from my own domain

[Dan McAllister]

Rajesh:

You have edited the log file, so I'm forced to suppose -- but most of 
this kind of SPAM that *I* am seeing these days looks like this:


   From: u...@mydomain.com otheru...@actual.spam.source.ru

The message APPEARS to be from u...@mydomain.com, but that is actually 
just the text name given to the FROM account.
The message then passes SPF because the sending host is listed as a 
verified sender for the domain source.ru or wherever it is coming from.


If this isn't the issue, please advise. If you're not comfortable 
posting the actual headers, please feel free to send them directly to me 
(vs. the list) so I can see more clearly what is happening.


Dan McAllister
QMT DNS/Mirror Admin

On 12/4/2014 1:23 AM, Rajesh M wrote:

hi

mydomain.com email service on my server.

i recd a spam from u...@mydomain.com, from the spammer's server.

the mailfrom shows as : u...@mydomain.com

Return-Path: apa...@lackdesign.cz

i use spf qmail spf check at level 2

logically Received-SPF is supposed to show as spf failed, however it is showing 
as pass.

is it because of the envelope sender, ie Return-Path header ?

could you please let me know what additional steps i need to take to prevent 
such spam with mailfrom as my own domain.


Return-Path: apa...@lackdesign.cz
Delivered-To: u...@mydomain.com
Received: (qmail 23216 invoked by uid 89); 3 Dec 2014 12:25:54 -
Received: by simscan 1.4.0 ppid: 23141, pid: 23209, t: 1.2472s
  scanners: attach: 1.4.0 clamav: 0.98.4/m: spam: 3.3.2
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
  ns1.y.com
X-Spam-Level:
X-Spam-Status: No, score=0.9 required=5.0 
tests=HTML_MESSAGE,MIME_HTML_ONLY,T_REMOTE_IMAGE,URI_HEX,headerSPFPASS
  autolearn=disabled version=3.3.2
Received: from unknown (HELO etna.w2hosting.cz) (82.208.49.33)
  by ns1.y.com with SMTP; 3 Dec 2014 12:25:52 -
Received-SPF: pass (ns1.y.com: SPF record at lackdesign.cz designates 
82.208.49.33 as permitted sender)
Received: from etna.w2hosting.cz (localhost.localdomain [127.0.0.1])
  (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
  (No client certificate requested)
  by etna.w2hosting.cz (Postfix) with ESMTPS id 216B0C687F
  for u...@mydomain.com; Wed, 3 Dec 2014 13:25:43 +0100 (CET)
Received: (from apache@localhost)
  by etna.w2hosting.cz (8.14.4/8.14.4/Submit) id sB3CPgqc017685;
  Wed, 3 Dec 2014 13:25:42 +0100
Date: Wed, 3 Dec 2014 13:25:42 +0100
Message-Id: 201412031225.sb3cpgqc017...@etna.w2hosting.cz
X-Authentication-Warning: etna.w2hosting.cz: apache set sender to 
apa...@lackdesign.cz using -f
To: u...@mydomain.com
Subject: [ PayPal ] : About Your Account . #PP-ID = 68872897358073360
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: u...@mydomain.com

rajesh




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



--
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!

[qmailtoaster] spam from my own domain

[Rajesh M]

hi

mydomain.com email service on my server.

i recd a spam from u...@mydomain.com, from the spammer's server.

the mailfrom shows as : u...@mydomain.com

Return-Path: apa...@lackdesign.cz

i use spf qmail spf check at level 2

logically Received-SPF is supposed to show as spf failed, however it is showing 
as pass.

is it because of the envelope sender, ie Return-Path header ?

could you please let me know what additional steps i need to take to prevent 
such spam with mailfrom as my own domain.


Return-Path: apa...@lackdesign.cz
Delivered-To: u...@mydomain.com
Received: (qmail 23216 invoked by uid 89); 3 Dec 2014 12:25:54 -
Received: by simscan 1.4.0 ppid: 23141, pid: 23209, t: 1.2472s
 scanners: attach: 1.4.0 clamav: 0.98.4/m: spam: 3.3.2
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
 ns1.y.com
X-Spam-Level:
X-Spam-Status: No, score=0.9 required=5.0 
tests=HTML_MESSAGE,MIME_HTML_ONLY,T_REMOTE_IMAGE,URI_HEX,headerSPFPASS
 autolearn=disabled version=3.3.2
Received: from unknown (HELO etna.w2hosting.cz) (82.208.49.33)
 by ns1.y.com with SMTP; 3 Dec 2014 12:25:52 -
Received-SPF: pass (ns1.y.com: SPF record at lackdesign.cz designates 
82.208.49.33 as permitted sender)
Received: from etna.w2hosting.cz (localhost.localdomain [127.0.0.1])
 (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by etna.w2hosting.cz (Postfix) with ESMTPS id 216B0C687F
 for u...@mydomain.com; Wed, 3 Dec 2014 13:25:43 +0100 (CET)
Received: (from apache@localhost)
 by etna.w2hosting.cz (8.14.4/8.14.4/Submit) id sB3CPgqc017685;
 Wed, 3 Dec 2014 13:25:42 +0100
Date: Wed, 3 Dec 2014 13:25:42 +0100
Message-Id: 201412031225.sb3cpgqc017...@etna.w2hosting.cz
X-Authentication-Warning: etna.w2hosting.cz: apache set sender to 
apa...@lackdesign.cz using -f
To: u...@mydomain.com
Subject: [ PayPal ] : About Your Account . #PP-ID = 68872897358073360
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: u...@mydomain.com

rajesh


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Question

[Mike Tirpak]

For about two weeks now, I have been getting nailed with tons of spam.  
I even had to drop my spamassassin score a point because so much was 
getting through just under the threshold.  I noticed that some of the 
spam was getting through with *SPAM* in the subject line.  I 
have tried to filter it out with spamassassin's subject filter, but 
asterisks are special characters and seem to be hard to match.


Does anyone know how to match an asterisk with spamassassin or is there 
a better way?


- Mike

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Question

[Dan McAllister]

Mike:

The ***SPAM*** you are seeing is actually being INSERTED by SpamAssassin 
(or, potentially SpamDyke).  It is not there upon receipt (e.g.: the 
spammer is not self-identifying the message as SPAM -- that's your SPAM 
protection working for you!)


Most clients want SPAM to be /identified/, but not necessarily _BLOCKED 
_(because of the potential for false positives). Thus, in my experience, 
most will create a rule in their mail client (Outlook, Thunderbird, 
etc) that moves messages with the string ***SPAM*** in the subject to 
a junk or spam folder for later perusal.


I hope this is helpful...

Dan McAllister
IT4SOHO


On 8/15/2014 11:46 AM, Mike Tirpak wrote:
For about two weeks now, I have been getting nailed with tons of 
spam.  I even had to drop my spamassassin score a point because so 
much was getting through just under the threshold.  I noticed that 
some of the spam was getting through with *SPAM* in the 
subject line.  I have tried to filter it out with spamassassin's 
subject filter, but asterisks are special characters and seem to be 
hard to match.


Does anyone know how to match an asterisk with spamassassin or is 
there a better way?


- Mike

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




--
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!

Re: [qmailtoaster] Spam Question

[Mike Tirpak]

I thought that at first too, but I looked at the header and SpamAssassin 
was not marking it as spam.  The email has *SPAM* in the 
subject line though.  I have a procmail script that filters out marked 
spam by status in header.  These messages are not getting caught by 
SpamAssassin that is why I asked about how to match *SPAM* 
with SpamAssassin.


On second thought, I might just use procmail to filter out emails with 
*SPAM* in the subject.  Might be simpler than getting 
SpamAssassin to match it.


Thanks
Mike

On 8/15/2014 12:12 PM, Dan McAllister wrote:

Mike:

The ***SPAM*** you are seeing is actually being INSERTED by 
SpamAssassin (or, potentially SpamDyke).  It is not there upon receipt 
(e.g.: the spammer is not self-identifying the message as SPAM -- 
that's your SPAM protection working for you!)


Most clients want SPAM to be /identified/, but not necessarily 
_BLOCKED _(because of the potential for false positives). Thus, in my 
experience, most will create a rule in their mail client (Outlook, 
Thunderbird, etc) that moves messages with the string ***SPAM*** in 
the subject to a junk or spam folder for later perusal.


I hope this is helpful...

Dan McAllister
IT4SOHO


On 8/15/2014 11:46 AM, Mike Tirpak wrote:
For about two weeks now, I have been getting nailed with tons of 
spam.  I even had to drop my spamassassin score a point because so 
much was getting through just under the threshold.  I noticed that 
some of the spam was getting through with *SPAM* in the 
subject line.  I have tried to filter it out with spamassassin's 
subject filter, but asterisks are special characters and seem to be 
hard to match.


Does anyone know how to match an asterisk with spamassassin or is 
there a better way?


- Mike

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com







-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Blocked due to a client with a virus/trojan.

[Tony White]

Hi folks,
  Not sure if there is a cure for this but I will ask.
Very recently a customer got a virus or trojan on
their machine which spammed using her account.
This caused my mail server to be spam blocked.
Not good but not permanent.

So...

1. Can we throttle the account?

2. Making the max recipients a smaller number does not seem
to slow down this sort of thing. Other alternatives?

3. How do we see a high volume from a single client and stop
accepting emails from that address?

4. Is there a way of monitoring the client send and if it exceeds
a set limit per minute change the client password and disconnect
them?


Appreciate anyone else having any thoughts or methods?

--
best wishes
  Tony White


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] spam - not flag but delete

[Jim Shupert]

Friends

I currently flag spam as ***SPAM***  but deliver it.
how can I simply delete a message - not deliver it - if the spam score 
is 'high enough'


thanks

jim s

[qmailtoaster] Spam

[Jim Shupert]

friends,

I know that I can see a graph of the amount of spam my server is getting 
by looking at

http://mailhost.pps-inc.com/stats-toaster/
*`Yearly' Graph (1 Day Average)
*but where/how can I get a 'number'*
that graph is being built by looking at a log but how can i do the same.
*
ideally
jan a number
feb a number

so that i can compare this feb to last feb.

thanks
jS*
*

[qmailtoaster] SPAM Emails generating from server

[Amit]

Please find below SMTP log.

2013-09-12 17:08:05.533459500 CHKUSER relaying rcpt: from
internalrevenueserv...@internalrevenue.org:: remote
User:unknown:127.0.0.1 rcpt onessaad...@yahoo.com : client allowed to
relay
2013-09-12 17:08:05.533460500 policy_check: remote
internalrevenueserv...@internalrevenue.org - remote
onessaad...@yahoo.com(UNAUTHENTICATED SENDER)
2013-09-12 17:08:05.533461500 policy_check: policy allows transmission
2013-09-12 17:08:05.579302500 CHKUSER relaying rcpt: from
internalrevenueserv...@internalrevenue.org:: remote
User:unknown:127.0.0.1 rcpt oni...@yahoo.com : client allowed to relay
2013-09-12 17:08:05.579305500 policy_check: remote
internalrevenueserv...@internalrevenue.org - remote
oni...@yahoo.com(UNAUTHENTICATED SENDER)
2013-09-12 17:08:05.579306500 policy_check: policy allows transmission
2013-09-12 17:08:05.581583500 CHKUSER relaying rcpt: from
internalrevenueserv...@internalrevenue.org:: remote
User:unknown:127.0.0.1 rcpt opensky...@yahoo.com : client allowed to
relay
2013-09-12 17:08:05.581585500 policy_check: remote
internalrevenueserv...@internalrevenue.org - remote
opensky...@yahoo.com(UNAUTHENTICATED SENDER)
2013-09-12 17:08:05.581586500 policy_check: policy allows transmission
2013-09-12 17:08:05.663348500 CHKUSER relaying rcpt: from
internalrevenueserv...@internalrevenue.org:: remote
User:unknown:127.0.0.1 rcpt onurgo...@uaeu.ac.ae : client allowed to
relay
2013-09-12 17:08:05.663352500 policy_check: remote
internalrevenueserv...@internalrevenue.org - remote
onurgo...@uaeu.ac.ae(UNAUTHENTICATED SENDER)
2013-09-12 17:08:05.663353500 policy_check: policy allows transmission


Such spam emails are getting generated from server.
Where do I look for source of the same? What will happen if I blacklist
127.0.0.1 IP in spamdyke?

Regards,

Amit

[qmailtoaster] Spam continuously shows this message

[ChandranManikandan]

Hi All,
I have checked maillog it's shows continuously below message and also it's
getting slow to access email through email client.

Aug 27 15:10:50 mail spamc[21349]: skipped message, greater than max
message size (512000 bytes)
Aug 27 15:10:50 mail spamc[21352]: skipped message, greater than max
message size (512000 bytes)
Aug 27 15:10:50 mail spamc[21353]: skipped message, greater than max
message size (512000 bytes)

And if i goto check the log in spamd folder in /var/log/qmail/spamd below
message shows continuously.

@4000521c53750c5cecb4 spamd: could not create INET socket on
127.0.0.1:783: Address already in use

@4000521c5375198d214c Aug 27 15:21:15.429 [22432] warn: server socket
setup failed, retry 1: spamd: could not create INET socket on 127.0.0.1:783:
Address already in use


How to resolve above things.

I have used zen.spamhaus.org in blacklist also.

I think above things suffer my mail server performance.

Please help me anyone.
-- 
*Thanks  Best Regards,
Manikandan.C
*

[qmailtoaster] SPAM so sick of it!

[Tony White]

Hi folks,
  I know you will probably think this is a small thing but my data bill has 
grown
by 15GB per month over the last few months. Just watching the smtp log is
so frustrating as all but 1% of the connections result in actual mail delivery.
Even then many of those connections result in spam.
  Can anyone please suggest how I can slow this down some more? Does
anyone actually disable smtp connections during any given time periods?
By this I mean it seems most of my spam arrives after midnight and goes
away at about 6am.

  Any ideas gratefully accepted.

--
best wishes
  Tony White


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] spam filter configuration change

[Giuseppe Perna]

Good morning to all,
I noticed recently that my server is receiving so much spam.
How can I change the filters and increase the severity?
I can make this change from the admin panel-toaster or do I have to change
any configuration files?
thanks





--

[qmailtoaster] Spam as a attachment

[Amit]

Hi Everyone,

 

 

My spam mails are getting attached instead of just adding SPAM tag.

 

From: Fernando 

Sent: Tuesday, 31 July 2012 3:34 PM

Cc: recipient list not shown:

Subject: 40K - 11/Sep/12 STCs traded $27.45

 

Spam detection software, running on the system mail.ikf.co.in, has
identified this incoming email as possible spam.  The original message has
been attached to this so you can view it (if it isn't spam) or label similar
future email.  If you have any questions, see the administrator of that
system for details.

 

What setting should I do so that instead of giving this message it just add
SPAM tag to email.

 

-- Amit

[qmailtoaster] Spam attack I cannot control.

[Tony White]

Hello,
  I am sending from my yahoo account as my ip is in the spamcop system. Of 
course
QMT uses spamcop therefore I am unable to send email from my normal account.
  At this time I am experienceing a spam attack against a single email address 
in one
of my domains.
  The format is as follows...

CHKUSER accepted sender: from escort...@9ether.com:va...@email.address.com: 
remote static-mumbai.wnet.net.in:unkn etc..

I have had to disable the account to at least stem the flow of emails but I do 
understand how
this kind of attack works. Firstly an invalid email address followed by a valid 
one which
seems to guarantee delivery.

  Is this normal? Has anyone else seen this and has a resolution? I would 
appreciate
any and
 all help here.

  Also I seem to get chkuser accepted any recipient for this domain is this 
linked to
this problem.

  Thank you all in advance...

Tony White

[qmailtoaster] Spam Mail

[Manikandan Mariappan]

Dear Support team,

 One of our users t...@example.com are getting valid mail(
x...@domain.com) in spam folder at every time. Can you guide me how to
resolve this problem.


-- 
Regards,
Manikandan.M

[qmailtoaster] Spam Relay from authenticated User

[Rafael Pereira de Abreu]

EHLO

Our host was recently added to a blacklist. I watched the logs below:

10-24 12:05:15 CHKUSER relaying rcpt: from 
ch50...@zing.vn:lgoncal...@ic.uff.br:
remote User:unknown:216.24.194.84 rcpt hac...@yahoo.com : client allowed to
relay
10-24 12:05:15 policy_check: local lgoncal...@ic.uff.br - remote 
hac...@yahoo.com
(AUTHENTICATED SENDER)

I understand that someone logged into the host and used as a relay. I'm 
searching
the internet the following questions:

1) How to force users to utilize strong passwords?

2) Is there a way to avoid this kind of attack?

3) Are there any warning for increasing message queue or simultaneous 
connections?

4) You can block attempts to break password brute force?

I thank first of all and I go searching.

-- 
Rafael Pereira de Abreu Rosa
Técnico de Suporte a Sistemas http://suporte.ic.uff.br
Instituto de Computação - UFF (Fluminense Federal University - Brazil)
Tel: (21) 2629-5664
Cel. (21) 8798-9057





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Relay from authenticated User

[Carlos Herrera Polo]

Fail2ban

2011/10/25, Rafael Pereira de Abreu raf...@ic.uff.br:
 EHLO

 Our host was recently added to a blacklist. I watched the logs below:

 10-24 12:05:15 CHKUSER relaying rcpt: from
 ch50...@zing.vn:lgoncal...@ic.uff.br:
 remote User:unknown:216.24.194.84 rcpt hac...@yahoo.com : client allowed
 to
 relay
 10-24 12:05:15 policy_check: local lgoncal...@ic.uff.br - remote
 hac...@yahoo.com
 (AUTHENTICATED SENDER)

 I understand that someone logged into the host and used as a relay. I'm
 searching
 the internet the following questions:

 1) How to force users to utilize strong passwords?

 2) Is there a way to avoid this kind of attack?

 3) Are there any warning for increasing message queue or simultaneous
 connections?

 4) You can block attempts to break password brute force?

 I thank first of all and I go searching.

 --
 Rafael Pereira de Abreu Rosa
 Técnico de Suporte a Sistemas http://suporte.ic.uff.br
 Instituto de Computação - UFF (Fluminense Federal University - Brazil)
 Tel: (21) 2629-5664
 Cel. (21) 8798-9057

 



 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com




-- 
Enviado desde mi dispositivo móvil

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Help

[Mike Tirpak]

Everyone,

I'm running the most current version of qmailtoaster and everyone is 
happy with it at my company.  The only thing is I have to run a loose 
Spam filter due to customer restrictions.  I don't get much Spam, but I 
find it a pain to add senders to the filter every time a co-worker get one.


Is there a way to automate this process?  As in setup a mailbox that 
users can send there Spam so it can be added to the filter without my 
intervention.  If anyone can help me out with this, I would greatly 
appreciate it.


Thanks,

Mike

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Help

[Pak Ogah]

On 09/27/11 22:54, Mike Tirpak wrote:

Everyone,

I'm running the most current version of qmailtoaster and everyone is 
happy with it at my company.  The only thing is I have to run a loose 
Spam filter due to customer restrictions.  I don't get much Spam, but 
I find it a pain to add senders to the filter every time a co-worker 
get one.


Is there a way to automate this process?  As in setup a mailbox that 
users can send there Spam so it can be added to the filter without my 
intervention.  If anyone can help me out with this, I would greatly 
appreciate it.


Thanks,

Mike

Mike,
First of all make sure you installed Spamdyke which can easily catch spam
http://qtp.qmailtoaster.com/trac/wiki/Features#qtp-install-spamdyke
http://wiki.qmailtoaster.com/index.php/Spamdyke

then you can create a email account s...@domain.com and 
nots...@domain.com for SA to learn

http://wiki.qmailtoaster.com/index.php/Spamassassin#Bayesian_Statistical_Scoring
make sure your user bounce/redirect the spam not forwarding it
http://wiki.qmailtoaster.com/index.php/How_to_redirect/bounce_mail_for_sa-learn

or you can enable Spam folder (IMAP which can be see by webmail and IMAP 
client)

http://wiki.qmailtoaster.com/index.php/FAQs#I_upgraded_my_QmailToaster_to_the_latest_and_I_no_longer_have_the_.22Spam_Detection.22_box_in_Qmailadmin.
so that your user can put spam message to it, and tell SA to learn it 
and remove it

http://qtp.qmailtoaster.com/trac/wiki/Features#qtp-clean-spam

HTH

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Control

[Carlos Herrera Polo]

For mailarchiving you must use mailarchiva (opensource) and qmail-taps.
Archiving mails in vpopmail account is not the best solution, if you
have more 30G in mails the search (imap) is too slow


2011/9/22, Eric Shubert e...@shubes.net:
 Yes, the actual account name. You would need to run qmailctl cdb after
 changing this file in order to activate the change.

 I believe the problem is, it would only work for email addressed
 specifically to the catchall account. Email addresses to non-existent
 account names would still be scanned, if I understand correctly.

 --
 -Eric 'shubes'

 On 09/22/2011 05:07 AM, Mike Tirpak wrote:
 Would that be the actual name of the account ( ex:
 catchacco...@mydomain.com) or catchall.acco...@mydomain.com? I tried to
 use the actual name and that didn't work.

 On 9/22/2011 1:25 AM, Eric Shubert wrote:
 On 09/21/2011 08:55 PM, Pak Ogah wrote:
 On 09/21/11 20:06, Mike Tirpak wrote:
 Everyone,

 I'm looking for a way to stop spamassassin from marking spam that goes
 to the catchall account. My company uses that account for paging and
 it adds unnecessary characters to the transmitting time. Short of
 adding each account to simcontrol, what can I do to prevent this from
 happening?

 you add this line to /var/qmail/control/simcontrol
 catchall.acco...@mydomain.com:clam=yes,spam=no,attach=.exe:.pif:.scr

 after that execute
 service qmail cdb

 by doing this your catchall.acco...@mydomain.com account won't be
 scanned for spam
 detail see:
 http://wiki.qmailtoaster.com/index.php/Simscan

 -


 Are you sure about this? If email comes in addressed to
 x...@domain.com, won't it get scanned, then delivered to the catchall
 account?


 -

 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!



 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com




-- 
Enviado desde mi dispositivo móvil

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Control

[Mike Tirpak]

Everyone,

I'm looking for a way to stop spamassassin from marking spam that goes 
to the catchall account.  My company uses that account for paging and it 
adds unnecessary characters to the transmitting time.  Short of adding 
each account to simcontrol, what can I do to prevent this from happening?


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Control

[Pak Ogah]

On 09/21/11 20:06, Mike Tirpak wrote:

Everyone,

I'm looking for a way to stop spamassassin from marking spam that goes 
to the catchall account.  My company uses that account for paging and 
it adds unnecessary characters to the transmitting time.  Short of 
adding each account to simcontrol, what can I do to prevent this from 
happening?



you add this line to /var/qmail/control/simcontrol
catchall.acco...@mydomain.com:clam=yes,spam=no,attach=.exe:.pif:.scr

after that execute
service qmail cdb

by doing this your catchall.acco...@mydomain.com account won't be 
scanned for spam

detail see:
http://wiki.qmailtoaster.com/index.php/Simscan

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] SPAM / Relayclient issues

[K Anand]

Hi all,
Recently seen a spurt in spam going out from my server.
What I have seen is that in such cases, this is the log.

CHKUSER relaying rcpt: from xx...@sail-steel.com:rmfpwr: remote 
k.st:unknown:183.5.232.68 rcpt yangjuan...@qq.com : client allowed 
to relay


Now, in my tcp.smtp, this client is not allowed to relay. So am stumped 
as to how this client is allowed to relay ? A small investigation showed 
up that the To address in such mails is coming as below :


simscan:[5907]:RELAYCLIENT:1.8346s:-:183.5.232.68:xx...@sail-steel.com:905690...@qq.com,1047623...@qq.com,z...@job20.com,285090...@qq.com,cq445_...@qq.com,huajing-2...@qq.com,4559...@qq.com

There is a : in the to line. Is that causing the problem ?

My server is accepting this, trying to deliver, failing, and bouncing to 
users in my domain ...


Thanx

Anand

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] SPAM / Relayclient issues

[K Anand]

On 19/05/2011 3:38 PM, K Anand wrote:

Hi all,
Recently seen a spurt in spam going out from my server.
What I have seen is that in such cases, this is the log.

CHKUSER relaying rcpt: from xx...@sail-steel.com:rmfpwr: remote
k.st:unknown:183.5.232.68 rcpt yangjuan...@qq.com : client allowed
to relay

Now, in my tcp.smtp, this client is not allowed to relay. So am stumped
as to how this client is allowed to relay ? A small investigation showed
up that the To address in such mails is coming as below :

simscan:[5907]:RELAYCLIENT:1.8346s:-:183.5.232.68:xx...@sail-steel.com:905690...@qq.com,1047623...@qq.com,z...@job20.com,285090...@qq.com,cq445_...@qq.com,huajing-2...@qq.com,4559...@qq.com


There is a : in the to line. Is that causing the problem ?

My server is accepting this, trying to deliver, failing, and bouncing to
users in my domain ...



Figured out the problem ...SMTP AUTH ...the guy guessed the password and 
got authenticated.



Anand

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] SPAM Designation Option

[Dan McAllister]

Greetings QMail list...

I am in the unenviable position of admitting that some of my QMail is FM 
to me (FM is f***ing magic or, in plainer terms I know it works, 
I just don't know how) -- and that has me in a bit of a quandary


I host web  e-mail for some of my clients and I have a NEW customer, 
who has asked me to turn off the SpamAssassin ***SPAM*** insert in the 
subject line... in fact, he wants to turn off ALL SPAM blocking for his 
domain.


So, how / where do I configure SpamAssassin (and SpamDyke, for that 
matter) to NOT process messages for his domain?


Thanks in advance,

Dan McAllister

--

IT4SOHO, LLC
PO Box 507
St. Petersburg, FL 33731-0507

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-490-4394 Fax

We make IT work for small business!



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] spam

[mattias]

I have set
Spamd=no I /var/qmail/control/simscan
Or if it whas spam=no
But I still see spamd up when I do
Qmailctl stat


http://mjw.se 


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Assassasin

[Emmanuel Buamah]

Hi All,

I was installing qmail toaster on CentOS, though it is not my first time, but 
my first time of encoutering this error. When it got to spamassassin, during 
the compilation, I got this error:

chmod: cannot access `/var/tmp/spamassassin-toaster-root/usr/bin/*': No such 
file or directory
error: Bad exit status from /var/tmp/rpm-tmp.27064 (%install)


RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.27064 (%install)
error: File not found by glob: 
/usr/src/redhat/RPMS/i386/spamassassin-toaster*.rpm

Installing clamav-toaster . . .
Shall we continue? (yes, skip, quit) [y]/s/q: q
Exiting.


Please any one have a solution to this problem?

Thanks in advance!



  

Re: [qmailtoaster] Spam Assassasin

[Carlos Herrera Polo]

What is qtp-newmodel :s ?


2010/12/23, Eric Shubert e...@shubes.net:
 On 12/23/2010 06:39 AM, Emmanuel Buamah wrote:
 Hi All,

 I was installing qmail toaster on CentOS, though it is not my first
 time, but my first time of encoutering this error. When it got to
 spamassassin, during the compilation, I got this error:

 chmod: cannot access `/var/tmp/spamassassin-toaster-root/usr/bin/*': No
 such file or directory

 This appears to be the problem, but I've no idea why there would be no
 files in this folder. Did something fail previous to this?

 I don't use the install script any more, I use qtp-newmodel instead (no
 sense in maintaining any more scripts than necessary). See if that
 doesn't work for you.
 --
 -Eric 'shubes'


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com




-- 
Enviado desde mi dispositivo móvil

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam filter

[mattias]

Can i administer it from the web?
E.g
Mail from address
Reject
So the sender recive a mail dilevery


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] ***SPAM***

[frperalta1]

http://veneziahouse.it/und10.html


  

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] spam relaying

[David Milholen]

Hi All,
 I am sure some have seen this before in their smtp logs.

@40004c54490126e69094 CHKUSER relaying rcpt: from 
keithra...@gmail.com:: remote *User:unknown:63.147.8.197* rcpt 
zara-har...@hotmail.com : client allowed to relay
@40004c54490126ec513c spamdyke[1982]: ALLOWED from: 
keithra...@gmail.com to: zara-har...@hotmail.com origin_ip: 63.147.8.197 
origin_rdns: *can-63-147-8-197.wletc.com* auth: (unknown)


The Ip address belongs to my network but the hotmail and gmail accounts 
do not.
This looks like a customers' machine with a bad bot-net virus. I have 
shut off any access to the mail server for that customer but it seems to 
be reoccurring until I flush the dns.

It will not show up for a while then it starts again.

Is my Dns compromised?

What can I do to not accept User:unkown by using spamdyke or other methods?

Thanks
Dave

Re: [qmailtoaster] spam relaying

[Jake Vickers]

On 07/31/2010 01:35 PM, David Milholen wrote:

Hi All,
 I am sure some have seen this before in their smtp logs.

@40004c54490126e69094 CHKUSER relaying rcpt: from 
keithra...@gmail.com:: remote *User:unknown:63.147.8.197* rcpt 
zara-har...@hotmail.com : client allowed to relay
@40004c54490126ec513c spamdyke[1982]: ALLOWED from: 
keithra...@gmail.com to: zara-har...@hotmail.com origin_ip: 
63.147.8.197 origin_rdns: *can-63-147-8-197.wletc.com* auth: (unknown)


The Ip address belongs to my network but the hotmail and gmail 
accounts do not.
This looks like a customers' machine with a bad bot-net virus. I have 
shut off any access to the mail server for that customer but it seems 
to be reoccurring until I flush the dns.

It will not show up for a while then it starts again.

Is my Dns compromised?

What can I do to not accept User:unkown by using spamdyke or other 
methods?


Aren't you allowing anyone who has one fo your IPs to relay all they 
want in your tcp.smtp? If so, then there's not much you can do unless 
you want tighten up your network or force everything to be scanned.

[qmailtoaster] SPAM rules

[Christian Ferrati]

Hi,

I installed the last version of Qmail Toaster on Centos 5.5 and on this mail 
server I only have one domain with 100 mail boxes;

I would create one mail s...@mydomain.com and I 'd like to move in this 
mail-box ALL e-mails with the header **SPAM** my SpamAssasin service already 
processed.

Is it possible to create a new rule in spamassassin (file local.cf) for moving 
in a single mail box all processed spam e-mails?

 

Thank you

 

Christian Ferrati

 

Dipartimento Tecnico/Sistemi

Smartcom SpA

Via R. Lepetit, 8 - 20020 Lainate (MI)

Tel. 0299813311 Fax 0299813197

www.smart-com.it http://www.smart-com.it 

 

 

   

 

Rispetta l'ambiente. Non stampare questa mail se non è necessario.

Respect the environment. Please print this email, only if strictly necessary.

 

 

 

Privacy, D. Lgs. n. 196/2003 n. 196, si precisa che le informazioni contenute 
in questo messaggio sono riservate e ad uso esclusivo del destinatario. Qualora 
il messaggio in parola Vi fosse pervenuto per errore, Vi invitiamo ad 
eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente 
comunicazione ai recapiti in calce. I Vostri dati personali, le Vostre 
coordinate di posta elettronica da Voi fornitici saranno utilizzati per i 
necessari adempimenti istituzionali e/o per obblighi di legge e non saranno 
oggetto di comunicazione o diffusione a terzi e saranno trattati sia in forma 
elettronica, che cartacea.
Ricordiamo infine che Vi sono riconosciuti i diritti di cui all'art. 7 del D. 
Lgs. 196/03 ( tra cui diritto di rettifica, aggiornamento, cancellazione).

 

Per comunicazioni tel. 0299813311- fax. 0299813197 oppure inviate una e-mail a 
priv...@smart-com.it mailto:priv...@smart-com.it 

 

image001.jpgimage002.jpg

Re: [qmailtoaster] SPAM rules

[Aleksander Podsiadły]

Dnia 2010-07-26, pon o godzinie 10:35 +0200, Christian Ferrati pisze:
 I would create one mail s...@mydomain.com and I ‘d like to move in
 this mail-box ALL e-mails with the header **SPAM** my SpamAssasin
 service already processed.

What for? It can be false positive classification. You shouldn't read
mails not addressed to you. It can be violation of law in your country.

-- 
Pozdrawiam / Regards,
Aleksander Podsiadły
mail: a...@westside.kielce.pl
jid: a...@jabber.westside.kielce.pl
ICQ: 201121279
gg: 9150578


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] SPAM rules

[Scott Hughes]

Do you have spam box turned on? If so, you could alter the maildrop script that would normally put the email marked as spam into the user's spam folder.I've never done anything like this before, but perhaps that is the place to start.Regards,ScottOn Jul 26, 2010, at 3:35 AM, "Christian Ferrati" christian.ferr...@smart-com.it wrote:



Hi,

I
installed the last version of Qmail Toaster on Centos 5.5 and on this mail
server I only have one domain with 100 mail boxes;

I
would create one mail s...@mydomain.com and
I ‘d like to move in this mail-box ALL e-mails with the header **SPAM** my
SpamAssasin service already processed.

Is
it possible to create a new rule in spamassassin (file local.cf) for moving in
a single mail box all processed spam e-mails?



Thank you



Christian Ferrati



Dipartimento Tecnico/Sistemi

Smartcom SpA

Via R. Lepetit, 8 – 20020 Lainate (MI)

Tel. 0299813311 Fax 0299813197

www.smart-com.it







Copia di Smart_firma
Description: Binary data





Rispetta l'ambiente. Non stampare questa mail se non è
necessario.

Respect the environment. Please print this email, only if
strictly necessary.





cid:image001.jpg@01CAC46F.6AE5A7D0
Description: Binary data




Privacy, D. Lgs. n. 196/2003 n. 196, si precisa che le
informazioni contenute in questo messaggio sono riservate e ad uso esclusivo
del destinatario. Qualora il messaggio in parola Vi fosse pervenuto per errore,
Vi invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene
gentilmente comunicazione ai recapiti in calce.I Vostri dati personali,
le Vostre coordinate di posta elettronica da Voi fornitici saranno utilizzati
per i necessari adempimenti istituzionali e/o per obblighi di legge e non
saranno oggetto di comunicazione o diffusione a terzi e saranno trattati sia in
forma elettronica, che cartacea.
Ricordiamo infine che Vi sono riconosciuti i diritti di cui all'art. 7 del D.
Lgs. 196/03 ( tra cui diritto di rettifica, aggiornamento, cancellazione).



Per comunicazioni tel. 0299813311– fax.0299813197
oppure inviate una e-mail a priv...@smart-com.it

Re: [qmailtoaster] SPAM rules

[Jake Vickers]

On 07/26/2010 04:35 AM, Christian Ferrati wrote:


Hi,

I installed the last version of Qmail Toaster on Centos 5.5 and on 
this mail server I only have one domain with 100 mail boxes;


I would create one mail s...@mydomain.com mailto:s...@mydomain.com 
and I 'd like to move in this mail-box ALL e-mails with the header 
**SPAM** my SpamAssasin service already processed.


Is it possible to create a new rule in spamassassin (file local.cf) 
for moving in a single mail box all processed spam e-mails?





Spamassassin only scores messages - it does not move them. You need to 
use something like maildrop (already included) to do this.
Carefully plan what you are doing as well - this will create additional 
administrative work on the admin's end.

[qmailtoaster] spam email routing query

[Rajesh M]

hi

the current system is such that all the emails that are spam (ie between 5
and 8) get tagged as spam in subject line and are are routed to the SPAM
folder which can be viewed via squirrelmail

my questions

1) is it possible to route these to a common mailbox which will be
monitored by a system admin

2) if the mail is genuine spam then the it is left as it is

3) if the email has been wrongly classified then the administrator will
move the email to another folder say notspam and then it will be delivered
to the recepient's inbox

rajesh





-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

[qmailtoaster] Spam Box Missing

[Scott Hughes]

On my secondary QMT server the spambox check box is missing in 
QmailAdmin.  I tried to rebuild the qmailadmin-toaster package with the 
'--define 'spambox 1'' option and then install it, but with no luck.


Obviously I am missing something.

Any suggestions?

Thanks,
Scott

[qmailtoaster] ***SPAM*** [qmailtoaster] Re: Blackberry invalid sender address format

[John Kagan]

Hi Eric,

I'm experiencing the problem you addressed below, but I haven't figured out
how to apply your solution. I wonder if you could point out what I'm
missing.

I've downloaded the RPM you indicated and confirmed it with md5sum. I didn't
initially delete the previous file from the SRPMS directory, but the
download seems to have overwritten it anyway.

However, when I run qtp-newmodel it says that the package is up to date
(which, going by the version number, it is) and doesn't process it - as
confirmed by checking the CHKUSER_ALLOW_SENDER_CHAR_3 entry in
/var/qmail/doc/chkuser_settings.h

I think maybe remove the existing package first means more than deleting
the .rpm file, but when I try rpm -e it complains about a bunch of
dependencies.

Should I force the rpm -e, or is there a better way to get qtp-newmodel to
re-process the package. I notice in  http://trac.shubes.net/qtp
http://trac.shubes.net/qtp that you identify allowing the script to rebuild
packages as an outstanding enhancement :)

Thanks,

John



I'm guessing that since the variable is commented out, it doesn't exist, so
cannot be changed (We're not real certain about how chkuser is handling
this). 

 http://qtp.qmailtoaster.com/repos/SRPMS/qmail-toaster-1.03-1.3.20.src.rpm
http://qtp.qmailtoaster.com/repos/SRPMS/qmail-toaster-1.03-1.3.20.src.rpm is
a version of the package that contains the / character for chkuser. This is
the only change in it from the stock package. Download (wget) it into
/usr/src/qtp-upgrade/SRPMS/ (don't forget to remove the existing package
there first), then run qtp-newmodel and have it rebuild the qmail-toaster
package. That'll fix you up. 

Jake, please refresh my memory. Why is it that this '/' character hasn't
been added to the stock package? It's becoming a real PITA for me as well as
others. ;) 

--

-Eric 'shubes'



smime.p7s
Description: S/MIME cryptographic signature

RE: [qmailtoaster] ***SPAM*** [qmailtoaster] Re: Blackberry invalid sender address format

[Mike Canty]

John,

I do this manually after looking at one of Jake's Videos.
Here is my notes on what to do.

 

Blackberry addresses may not work correctly so we need to allow the / that
some Blackberry system put in place.

 

Go to our QMT downloads directory

cd /QMT

 

Start screen to operate in a separate shell

screen

 

Now we need to install the source code for qmail-toaster (Note: - you may
need to check for the latest version files, especially if you have done an
upgrade, also look for the architecture it might be i686).

 

rpm -Uvh qmail-toaster-1.03-1.3.18.src.rpm

cd /usr/src/redhat/SPECS

vim qmail-toaster.spec

 

Now we need to get to line 843 or so, look for sleep 5.  Change this to
sleep 300.  This will give us time to modify the configuration during the
compile section.

 

rpmbuild -bb qmail-toaster.spec

exit screen by Ctrl+A+D to detach

 

vim /usr/src/redhat/BUILD/qmail-1.03/chkuser_settings.h

Look for CHKUSER_ALLOW_SENDER_CHAR

 

Adjust the line below to allow the / Special Character

 

WAS

#define CHKUSER_ALLOW_SENDER_CHAR_1 '$'

#define CHKUSER_ALLOW_SENDER_CHAR_2 '%'

/* #define CHKUSER_ALLOW_SENDER_CHAR_3 '' */ 

#define CHKUSER_ALLOW_SENDER_CHAR_4 '?'

#define CHKUSER_ALLOW_SENDER_CHAR_5 '*'

 

(NOW has the / included)

#define CHKUSER_ALLOW_SENDER_CHAR_1 '$'

#define CHKUSER_ALLOW_SENDER_CHAR_2 '%'

#define CHKUSER_ALLOW_SENDER_CHAR_3 '/'  

#define CHKUSER_ALLOW_SENDER_CHAR_4 '?'

#define CHKUSER_ALLOW_SENDER_CHAR_5 '*'

Save and quit

 

Reconnect to the detached screen

screen -r

Wait until the build completes

 

Now we need to reinstall the qmail-toaster packages.  This will update all
of the Qmail packages to allow the Special Character.

cd /usr/src/redhat/RPMS/x86_64/

rpm -Uvh --replacefiles --replacepkgs qmail-*.rpm

 

After this has completed, we need to stop and restart qmail.

qmailctl stop

Maks sure all has stopped

qmailctl stat

Then restart

qmailctl start

 

I hope this helps.

 

Cheers

 

From: John Kagan [mailto:jka...@e-mtsonline.com] 
Sent: Wednesday, 9 June 2010 1:01 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] ***SPAM*** [qmailtoaster] Re: Blackberry invalid
sender address format

 

Hi Eric,

I'm experiencing the problem you addressed below, but I haven't figured out
how to apply your solution. I wonder if you could point out what I'm
missing.

I've downloaded the RPM you indicated and confirmed it with md5sum. I didn't
initially delete the previous file from the SRPMS directory, but the
download seems to have overwritten it anyway.

However, when I run qtp-newmodel it says that the package is up to date
(which, going by the version number, it is) and doesn't process it - as
confirmed by checking the CHKUSER_ALLOW_SENDER_CHAR_3 entry in
/var/qmail/doc/chkuser_settings.h

I think maybe remove the existing package first means more than deleting
the .rpm file, but when I try rpm -e it complains about a bunch of
dependencies.

Should I force the rpm -e, or is there a better way to get qtp-newmodel to
re-process the package. I notice in  http://trac.shubes.net/qtp
http://trac.shubes.net/qtp that you identify allowing the script to rebuild
packages as an outstanding enhancement :)

Thanks,

John



I'm guessing that since the variable is commented out, it doesn't exist, so
cannot be changed (We're not real certain about how chkuser is handling
this). 

 http://qtp.qmailtoaster.com/repos/SRPMS/qmail-toaster-1.03-1.3.20.src.rpm
http://qtp.qmailtoaster.com/repos/SRPMS/qmail-toaster-1.03-1.3.20.src.rpm is
a version of the package that contains the / character for chkuser. This is
the only change in it from the stock package. Download (wget) it into
/usr/src/qtp-upgrade/SRPMS/ (don't forget to remove the existing package
there first), then run qtp-newmodel and have it rebuild the qmail-toaster
package. That'll fix you up. 

Jake, please refresh my memory. Why is it that this '/' character hasn't
been added to the stock package? It's becoming a real PITA for me as well as
others. ;) 

--

-Eric 'shubes'

Re: [qmailtoaster] spam

[madmac]

Is there then a way to secure squirrelmail, or any other webmail prog.
This is a default install of qmail with the  ISO.
Not having it is not an option, as most of the clients can only use webmail as 
they are on the road daily.

Thanks


  - Original Message - 
  From: Jake Vickers 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Thursday, April 08, 2010 5:53 PM
  Subject: Re: [qmailtoaster] spam


  On 04/08/2010 04:21 PM, madmac wrote: 
Well anyone that can guess my passwords must be amazing.
Let alone get through the elaborate firewall system.
ssh port is  non standard 

But I agree, this box is compromised  some how 

File count now at 9580 and counting



  Are all of the files that are infected from mailboxes?
  It does sound like your machine has been compromised. If you leave 
Squirrelmail open (ie: no protection against password attacks) or have other 
webapps running then this is the most likely place for them to get in. Once 
they have an account's login credentials, they can upload things to themselves 
and run them (don't ask me how - I never looked at how they did it - I just 
fixed it) and then brute force passwords from the local machine to obtain other 
access or whatever they are looking to do.
  I had one a year or so back where a guy installed phpbb - when he came in the 
next day someone had emailed him his root password. He reinstalled and put 
phpbb back on and had his machine compromised in about 2 hours after that.

Re: [qmailtoaster] spam

[Jake Vickers]

On 04/09/2010 11:25 AM, madmac wrote:

Is there then a way to secure squirrelmail, or any other webmail prog.
This is a default install of qmail with the  ISO.
Not having it is not an option, as most of the clients can only use 
webmail as they are on the road daily.

Thanks



I use fail2ban to monitor for brute-force attacks. Works on pop3 as well.

[qmailtoaster] spam

[test]

I received reports today that my qmail server was spaamming, and trying to get 
into others ssh ports.
Many complaints and emails from ab...@otherdomain.com ( eg )

Loggin in to the box , mostly unresonsive, sen a whole bunch of entries that 
looked dodgy

eg: ./brk ***
could not kill the process, so did a reboot.
stopped qmail, stopped named, stopped mysql etc.

created a  catch  directory
mkdir -p /var/clamav/unwanted
cd /var
chown -R clamav:clamav clamav/
Then decided to manually run a complete clamav system scan ( after getting 
freshclam update ) 
cd /
/usr/bin/clamscan -r -i --move=/var/log/clamav/unwanted/ -l 
/var/log/clamav/clamscan.log

Currently found 2270 infected files , mostly users email with : 
Sanesecurity.Junk.27236.UNOFFICIAL FOUND ( the 27236 numbers vary )
And still scanning.


So my question would be , why, is the server not stopping this when it come in 
to the email?

What should I check in the configs.

Thanks all
madmac

Re: [qmailtoaster] spam

[madmac]

Now at 5829 , still counting.

madmac
  - Original Message - 
  From: test 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Thursday, April 08, 2010 1:05 PM
  Subject: [qmailtoaster] spam


  I received reports today that my qmail server was spaamming, and trying to 
get into others ssh ports.
  Many complaints and emails from ab...@otherdomain.com ( eg )

  Loggin in to the box , mostly unresonsive, sen a whole bunch of entries that 
looked dodgy

  eg: ./brk ***
  could not kill the process, so did a reboot.
  stopped qmail, stopped named, stopped mysql etc.

  created a  catch  directory
  mkdir -p /var/clamav/unwanted
  cd /var
  chown -R clamav:clamav clamav/
  Then decided to manually run a complete clamav system scan ( after getting 
freshclam update ) 
  cd /
  /usr/bin/clamscan -r -i --move=/var/log/clamav/unwanted/ -l 
/var/log/clamav/clamscan.log

  Currently found 2270 infected files , mostly users email with : 
Sanesecurity.Junk.27236.UNOFFICIAL FOUND ( the 27236 numbers vary )
  And still scanning.


  So my question would be , why, is the server not stopping this when it come 
in to the email?

  What should I check in the configs.

  Thanks all
  madmac

RE: [qmailtoaster] spam

[Michael Colvin]

I mean.It's a wild guess, but it sure sounds like your box has been hacked.
The spamming can have several causes, but why is your box trying to connect
to other servers via SSH?  Have you changed your passwords?  Although, at
this point, it's probably too late and changing them wouldn't do much.

 

Sound's like you've been owned.

 

 

Michael J. Colvin

NorCal Internet Services

 http://www.norcalisp.com/ www.norcalisp.com

 

 http://www.norcalisp.com/ 

 

  _  

From: madmac [mailto:sysad...@tricubemedia.com] 
Sent: Thursday, April 08, 2010 12:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] spam

 

Now at 5829 , still counting.

 

madmac

- Original Message - 

From: test mailto:sysad...@tricubemedia.com  

To: qmailtoaster-list@qmailtoaster.com 

Sent: Thursday, April 08, 2010 1:05 PM

Subject: [qmailtoaster] spam

 

I received reports today that my qmail server was spaamming, and trying to
get into others ssh ports.

Many complaints and emails from ab...@otherdomain.com ( eg )

 

Loggin in to the box , mostly unresonsive, sen a whole bunch of entries that
looked dodgy

 

eg: ./brk ***

could not kill the process, so did a reboot.

stopped qmail, stopped named, stopped mysql etc.

 

created a  catch  directory

mkdir -p /var/clamav/unwanted

cd /var

chown -R clamav:clamav clamav/

Then decided to manually run a complete clamav system scan ( after getting
freshclam update ) 

cd /

/usr/bin/clamscan -r -i --move=/var/log/clamav/unwanted/ -l
/var/log/clamav/clamscan.log

 

Currently found 2270 infected files , mostly users email with :
Sanesecurity.Junk.27236.UNOFFICIAL FOUND ( the 27236 numbers vary )

And still scanning.

 

 

So my question would be , why, is the server not stopping this when it come
in to the email?

 

What should I check in the configs.

 

Thanks all

madmac

image001.gif

Re: [qmailtoaster] spam

[madmac]

Well anyone that can guess my passwords must be amazing.
Let alone get through the elaborate firewall system.
ssh port is  non standard 

But I agree, this box is compromised  some how 

File count now at 9580 and counting


  - Original Message - 
  From: Michael Colvin 
  To: qmailtoaster-list@qmailtoaster.com 
  Sent: Thursday, April 08, 2010 1:39 PM
  Subject: RE: [qmailtoaster] spam


  I mean.It's a wild guess, but it sure sounds like your box has been hacked.  
The spamming can have several causes, but why is your box trying to connect to 
other servers via SSH?  Have you changed your passwords?  Although, at this 
point, it's probably too late and changing them wouldn't do much.

   

  Sound's like you've been owned.

   

   

  Michael J. Colvin

  NorCal Internet Services

  www.norcalisp.com

   



   


--

  From: madmac [mailto:sysad...@tricubemedia.com] 
  Sent: Thursday, April 08, 2010 12:23 PM
  To: qmailtoaster-list@qmailtoaster.com
  Subject: Re: [qmailtoaster] spam

   

  Now at 5829 , still counting.

   

  madmac

- Original Message - 

From: test 

To: qmailtoaster-list@qmailtoaster.com 

Sent: Thursday, April 08, 2010 1:05 PM

Subject: [qmailtoaster] spam

 

I received reports today that my qmail server was spaamming, and trying to 
get into others ssh ports.

Many complaints and emails from ab...@otherdomain.com ( eg )

 

Loggin in to the box , mostly unresonsive, sen a whole bunch of entries 
that looked dodgy

 

eg: ./brk ***

could not kill the process, so did a reboot.

stopped qmail, stopped named, stopped mysql etc.

 

created a  catch  directory

mkdir -p /var/clamav/unwanted

cd /var

chown -R clamav:clamav clamav/

Then decided to manually run a complete clamav system scan ( after getting 
freshclam update ) 

cd /

/usr/bin/clamscan -r -i --move=/var/log/clamav/unwanted/ -l 
/var/log/clamav/clamscan.log

 

Currently found 2270 infected files , mostly users email with : 
Sanesecurity.Junk.27236.UNOFFICIAL FOUND ( the 27236 numbers vary )

And still scanning.

 

 

So my question would be , why, is the server not stopping this when it come 
in to the email?

 

What should I check in the configs.

 

Thanks all

madmac
image001.gif

Re: [qmailtoaster] spam

[Postmaster]

This could have been a key logger trojan or something.
Any server has got an "Achilles heel".

The jump from 5829 msgs to 9580 in about 1 hour is not normal even for
"marketing orientated" e-mail servers.
Personally, I would re-install the server changing ssh port and all
passwords etc.

Regards
Alex

On 08/04/2010 21:21, madmac wrote:

  
  

  
  Well anyone that can guess my
passwords must be amazing.
  Let alone get through the elaborate
firewall system.
  ssh port is " non standard "
  
  But I agree, this box is compromised
" some how "
  
  File count now at 9580 and counting
  
  
  
-
Original Message - 
From:
Michael Colvin 
To:
qmailtoaster-list@qmailtoaster.com

Sent:
Thursday, April 08, 2010 1:39 PM
Subject:
RE: [qmailtoaster] spam



I meanIts
a wild guess, but it sure sounds like your box has been hacked The
spamming can have several causes, but why is your box trying to connect
to other servers via SSH? Have you changed your passwords? Although,
at this point, its probably too late and changing them wouldnt do
much

Sounds like
youve been owned.





Michael J. Colvin
NorCal Internet Services
www.norcalisp.com









 
From: madmac
[mailto:sysad...@tricubemedia.com] 
Sent: Thursday,
April 08, 2010 12:23 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re:
[qmailtoaster] spam



Now at 5829 , still
counting.





madmac


  
  - Original Message
- 
  
  
  From: test 
  
  
  To: qmailtoaster-list@qmailtoaster.com
  
  
  
  Sent: Thursday, April 08, 2010
1:05 PM
      
  
  Subject: [qmailtoaster] spam
  
  
  
  
  
  I received reports today
that my qmail server was spaamming, and trying to get into others ssh
ports.
  
  
  Many complaints and
emails from ab...@otherdomain.com ( eg )
  
  
  
  
  
  Loggin in to the box ,
mostly unresonsive, sen a whole bunch of entries that looked dodgy
  
  
  
  
  
  eg: ./brk ***
  
  
  could not kill the
process, so did a reboot.
  
  
  stopped qmail, stopped
named, stopped mysql etc.
  
  
  
  
  
  created a " catch "
directory
  
  
  mkdir -p
/var/clamav/unwanted
  
  
  cd /var
  
  
  chown -R clamav:clamav
clamav/
  
  
  Then decided to manually
run a complete clamav system scan ( after getting freshclam update ) 
  
  
  cd /
  
  
  /usr/bin/clamscan
-r -i --move=/var/log/clamav/unwanted/ -l /var/log/clamav/clamscan.log
  
  
  
  
  
  Currently found2270
infected files , mostly users email with :
Sanesecurity.Junk.27236.UNOFFICIAL FOUND ( the 27236 numbers vary )
  
  
  And still scanning.
  
  
  
  
  
  
  
  
  So my question would be ,
why, is the server not stopping this when it come in to the email?
  
  
  
  
  
  What should I check in
the configs.
  
  
  
  
  
  Thanks all
  
  
  madmac
  



  

Re: [qmailtoaster] spam

[Jake Vickers]

On 04/08/2010 04:21 PM, madmac wrote:

Well anyone that can guess my passwords must be amazing.
Let alone get through the elaborate firewall system.
ssh port is  non standard 
But I agree, this box is compromised  some how 
File count now at 9580 and counting



Are all of the files that are infected from mailboxes?
It does sound like your machine has been compromised. If you leave 
Squirrelmail open (ie: no protection against password attacks) or have 
other webapps running then this is the most likely place for them to get 
in. Once they have an account's login credentials, they can upload 
things to themselves and run them (don't ask me how - I never looked at 
how they did it - I just fixed it) and then brute force passwords from 
the local machine to obtain other access or whatever they are looking to do.
I had one a year or so back where a guy installed phpbb - when he came 
in the next day someone had emailed him his root password. He 
reinstalled and put phpbb back on and had his machine compromised in 
about 2 hours after that.

[qmailtoaster] Spam Increase

[Amit Dalia]

Hi Everone,

I found that Spam are little increased on my Qmail Toaster Server.
I'm using Spamdyke on my server. Most spam mails don't know how
exactly get score 4.9. My default spam score set was 5.0.

Any help what should I update my server?

Thanks and Regards, ​

Amit

Re: [qmailtoaster] spam

[Jake Vickers]

On 03/23/2010 11:00 AM, madmac wrote:
Some of our clients are saying they are getting tons more spam than 
usual.

I have them send me the IP`s from the email headers,

1.Can I block spammers using IP address
2. Do I need to install sopamdyke to accomplish this

Thanks



There's been an increase in spam lately, according to my server's metrics.
For habitual spammy servers, I block them in iptables. You can also 
block them in the tcp.smtp file.



-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam

[madmac]

Thanks for the reply Jake.

I am very familiar with IP tables,
I am using you  firewall  built into the ISO installer.

So instead of adding many lines of IP addresses to the 
/etc/rc.d/firewall.ruleset,
Can I add a line that will load a second file , say called badip which 
contains a list of firewall rules just for the bad IP`s.


Can you also show what to add to the tcp.smtp, in case I want to use 
that method


Any one tried using, Inter7`s tcpblocker?

Thanks



Jake Vickers wrote:

On 03/23/2010 11:00 AM, madmac wrote:
Some of our clients are saying they are getting tons more spam than 
usual.

I have them send me the IP`s from the email headers,

1.Can I block spammers using IP address
2. Do I need to install sopamdyke to accomplish this

Thanks



There's been an increase in spam lately, according to my server's 
metrics.
For habitual spammy servers, I block them in iptables. You can also 
block them in the tcp.smtp file.



- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com








-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam

[Igor Smitran]

In order to block sender IP with iptables:
/sbin/iptables -A INPUT -s SENDER_IP -p tcp -m tcp --dport 25 
--tcp-flags FIN,SYN,RST,ACK SYN -j DROP


In order to block sender ip with tcp.smtp:
on top of tcp.smtp file put:

SENDER_IP:deny

after changing tcp.smtp do /etc/init.d/qmail cdb




On 3/23/2010 4:58 PM, madmac wrote:

Thanks for the reply Jake.

I am very familiar with IP tables,
I am using you  firewall  built into the ISO installer.

So instead of adding many lines of IP addresses to the 
/etc/rc.d/firewall.ruleset,
Can I add a line that will load a second file , say called badip 
which contains a list of firewall rules just for the bad IP`s.


Can you also show what to add to the tcp.smtp, in case I want to use 
that method


Any one tried using, Inter7`s tcpblocker?

Thanks



Jake Vickers wrote:

On 03/23/2010 11:00 AM, madmac wrote:
Some of our clients are saying they are getting tons more spam than 
usual.

I have them send me the IP`s from the email headers,

1.Can I block spammers using IP address
2. Do I need to install sopamdyke to accomplish this

Thanks



There's been an increase in spam lately, according to my server's 
metrics.
For habitual spammy servers, I block them in iptables. You can also 
block them in the tcp.smtp file.



- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com








- 

Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and 
installations.

 If you need professional help with your setup, contact them today!
- 

Please visit qmailtoaster.com for the latest news, updates, and 
packages.
 To unsubscribe, e-mail: 
qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: 
qmailtoaster-list-h...@qmailtoaster.com






-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam Emails Quarantine

[Amit]

Hi Eric/ Jake and others,

Any help for the below?

regards,

Amit

On Sat, Mar 20, 2010 at 12:02 AM, Amit a...@ikf.co.in wrote:

 Thanks Gilbert.
 Will try this. By the way I was studying more about Simscan filter and
 found that there is a option for quarantining the spam and virus emails in
 Simscan. I tried to rebuild the module but it doesn't work.

 Had anyone tried this? If yes can he provide me help on the same.

 Regards,

 Amit



 On Fri, Mar 19, 2010 at 10:10 PM, Gilbert T. Gutierrez, Jr. 
 mailing-li...@phoenixinternet.net wrote:

  I believe you would do this in the mailfilter file located in the
 /etc/mail/ folder.  I am not sure on the exact coding, but you would replace
 the instructions that you have that moves the email to $VHOME/Maildir/.Spam
 to where you want it to go.  Hope this points you in the right direction.

 Gilbert



 - Original Message -
 *From:* Amit a...@ikf.co.in
 *To:* qmailtoaster-list qmailtoaster-list@qmailtoaster.com
 *Sent:* Friday, March 19, 2010 5:56 AM
 *Subject:* [qmailtoaster] Spam Emails Quarantine

 Hi Everyone,

 How do I move all spam emails coming to my server to a separate email id
 let say s...@domainname instead of deleting it or delivering it to spam
 folder of user mail box?

 Regards,

 Amit

Re: [qmailtoaster] Spam Emails Quarantine

[Jake Vickers]

On 03/20/2010 02:03 PM, Amit wrote:

Hi Eric/ Jake and others,

Any help for the below?

regards,

Amit

On Sat, Mar 20, 2010 at 12:02 AM, Amit a...@ikf.co.in 
mailto:a...@ikf.co.in wrote:


Thanks Gilbert.
Will try this. By the way I was studying more about Simscan filter
and found that there is a option for quarantining the spam and
virus emails in Simscan. I tried to rebuild the module but it
doesn't work.

Had anyone tried this? If yes can he provide me help on the same.

Regards,



It's not the stock Qmailtoaster, so no.

Re: [qmailtoaster] Spam Emails Quarantine

[Amit]

Ok. Actually I asked same question to Simscan Mailing List but no reply from
anyone over there.



On Sat, Mar 20, 2010 at 11:20 PM, Jake Vickers j...@qmailtoaster.comwrote:

  On 03/20/2010 02:03 PM, Amit wrote:

 Hi Eric/ Jake and others,

 Any help for the below?

 regards,

 Amit

 On Sat, Mar 20, 2010 at 12:02 AM, Amit a...@ikf.co.in wrote:

 Thanks Gilbert.
 Will try this. By the way I was studying more about Simscan filter and
 found that there is a option for quarantining the spam and virus emails
 in Simscan. I tried to rebuild the module but it doesn't work.

 Had anyone tried this? If yes can he provide me help on the same.

 Regards,


 It's not the stock Qmailtoaster, so no.

Re: [qmailtoaster] Spam Emails Quarantine

[Gilbert T. Gutierrez, Jr.]

I believe you would do this in the mailfilter file located in the /etc/mail/ 
folder.  I am not sure on the exact coding, but you would replace the 
instructions that you have that moves the email to $VHOME/Maildir/.Spam to 
where you want it to go.  Hope this points you in the right direction.

Gilbert


  - Original Message - 
  From: Amit 
  To: qmailtoaster-list 
  Sent: Friday, March 19, 2010 5:56 AM
  Subject: [qmailtoaster] Spam Emails Quarantine


  Hi Everyone,

  How do I move all spam emails coming to my server to a separate email id let 
say s...@domainname instead of deleting it or delivering it to spam folder of 
user mail box?

  Regards,

  Amit

Re: [qmailtoaster] Spam Emails Quarantine

[Amit]

Thanks Gilbert.
Will try this. By the way I was studying more about Simscan filter and found
that there is a option for quarantining the spam and virus emails. I tried
to rebuild the module but it doesn't work.

Had anyone tried this? If yes can he provide me help on the same.

Regards,

Amit


On Fri, Mar 19, 2010 at 10:10 PM, Gilbert T. Gutierrez, Jr. 
mailing-li...@phoenixinternet.net wrote:

  I believe you would do this in the mailfilter file located in the
 /etc/mail/ folder.  I am not sure on the exact coding, but you would replace
 the instructions that you have that moves the email to $VHOME/Maildir/.Spam
 to where you want it to go.  Hope this points you in the right direction.

 Gilbert



 - Original Message -
 *From:* Amit a...@ikf.co.in
 *To:* qmailtoaster-list qmailtoaster-list@qmailtoaster.com
 *Sent:* Friday, March 19, 2010 5:56 AM
 *Subject:* [qmailtoaster] Spam Emails Quarantine

 Hi Everyone,

 How do I move all spam emails coming to my server to a separate email id
 let say s...@domainname instead of deleting it or delivering it to spam
 folder of user mail box?

 Regards,

 Amit

[qmailtoaster] Spam filter

[mattias]

Not remember
How to complete switch off all mail filters in qmt?


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam masquerade

[PACOI]

I need one howto for install spamdyke
Thanks

On Fri, Feb 19, 2010 at 11:26 AM, PACOI ppa...@gmail.com wrote:
 Thanks i see the information

 On Fri, Feb 19, 2010 at 11:23 AM, Scott Hughes sonicscott9...@gmail.com 
 wrote:
 Pacoi,

 Try this:  http://wiki.qmailtoaster.com/index.php/Spamdyke

 Scott


 On Fri, Feb 19, 2010 at 11:11 AM, PACOI ppa...@gmail.com wrote:

 Thanks

 how install spamdyke?


 On Fri, Feb 19, 2010 at 11:08 AM, Dave Hallowell d...@acbsco.com wrote:
  Pacoi,
  Install spamdyke. Easily done via qmailtoaster plus.
  Dave
 
  PACOI wrote:
 
  This show on my logs
  @40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
  simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
 
  sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,use...@dominio.com
  This Ip  213.207.34.201 is not Auth for send mail
  On the mail client outlook show
  De: usua...@dominio.com [mailto:usua...@dominio.com]
  Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
  Para: usua...@dominio.com
  Asunto: Winter season sale
  This account or spam masquerade send mail for my account internal
  On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:
 
 
  I don't see a source printout.  I would be looking for a virus or
  Malware on an internal system before I'd worry about the spam filter.
  On 02/19/2010 08:17 AM, PACOI wrote:
 
 
  Hi all
  For the last month we've been getting a lot of SPAM that shows as an
  internal e-mail, mainly Viagra ads. I've included the source printout
  for reference. This one shows that I sent it to myself but it's just
  as likely to get one of these with an address of someone else in our
  mail domain.
  I've been hoping the spam filter would adjust and start catching these
  things but that doesn't appear to be happening.
  Anyone else getting these? If so, have you been able to come up with a
  technique or setting to catch these?
  Thanks for you help
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
  installations.
        If you need professional help with your setup, contact them today!
 
  -
       Please visit qmailtoaster.com for the latest news, updates, and
  packages.
        To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
       For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
  --
  Cecil Yother, Jr. cj
  cj's
  2318 Clement Ave
  Alameda, CA  94501
  tel 510.865.2787 | fax 510.864.7300
  http://yother.com
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and
  installations.
       If you need professional help with your setup, contact them today!
 
  -
      Please visit qmailtoaster.com for the latest news, updates, and
  packages.
       To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
      For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
  installations.
        If you need professional help with your setup, contact them today!
 
  -
       Please visit qmailtoaster.com for the latest news, updates, and
  packages.
 
        To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
       For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
  support and installations. If you need professional help with your
  setup,
  contact them today!
 
  -
  Please visit qmailtoaster.com for the latest news, updates, and
  packages. To
  unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
  additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
    Vickers Consulting Group offers Qmailtoaster support and installations.
      If you need professional help with your setup, contact 

[qmailtoaster] spam masquerade

[PACOI]

Hi all

For the last month we've been getting a lot of SPAM that shows as an
internal e-mail, mainly Viagra ads. I've included the source printout
for reference. This one shows that I sent it to myself but it's just
as likely to get one of these with an address of someone else in our
mail domain.

I've been hoping the spam filter would adjust and start catching these
things but that doesn't appear to be happening.

Anyone else getting these? If so, have you been able to come up with a
technique or setting to catch these?

Thanks for you help

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam masquerade

[PACOI]

This show on my logs

@40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,use...@dominio.com

This Ip  213.207.34.201 is not Auth for send mail

On the mail client outlook show

De: usua...@dominio.com [mailto:usua...@dominio.com]
Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
Para: usua...@dominio.com
Asunto: Winter season sale

This account or spam masquerade send mail for my account internal

On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:
 I don't see a source printout.  I would be looking for a virus or
 Malware on an internal system before I'd worry about the spam filter.



 On 02/19/2010 08:17 AM, PACOI wrote:
 Hi all

 For the last month we've been getting a lot of SPAM that shows as an
 internal e-mail, mainly Viagra ads. I've included the source printout
 for reference. This one shows that I sent it to myself but it's just
 as likely to get one of these with an address of someone else in our
 mail domain.

 I've been hoping the spam filter would adjust and start catching these
 things but that doesn't appear to be happening.

 Anyone else getting these? If so, have you been able to come up with a
 technique or setting to catch these?

 Thanks for you help

 -
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and installations.
       If you need professional help with your setup, contact them today!
 -
      Please visit qmailtoaster.com for the latest news, updates, and 
 packages.

       To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
      For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




 --
 Cecil Yother, Jr. cj
 cj's
 2318 Clement Ave
 Alameda, CA  94501

 tel 510.865.2787 | fax 510.864.7300
 http://yother.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group 
 (www.vickersconsulting.com)
    Vickers Consulting Group offers Qmailtoaster support and installations.
      If you need professional help with your setup, contact them today!
 -
     Please visit qmailtoaster.com for the latest news, updates, and packages.

      To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
     For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam masquerade

[Dave Hallowell]

Pacoi,
Install spamdyke. Easily done via qmailtoaster plus.
Dave

PACOI wrote:

  This show on my logs

@40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,use...@dominio.com

This Ip  213.207.34.201 is not Auth for send mail

On the mail client outlook show

De: usua...@dominio.com [mailto:usua...@dominio.com]
Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
Para: usua...@dominio.com
Asunto: Winter season sale

This account or spam masquerade send mail for my account internal

On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:
  
  
I don't see a source printout. I would be looking for a virus or
Malware on an internal system before I'd worry about the spam filter.



On 02/19/2010 08:17 AM, PACOI wrote:


  Hi all

For the last month we've been getting a lot of SPAM that shows as an
internal e-mail, mainly Viagra ads. I've included the source printout
for reference. This one shows that I sent it to myself but it's just
as likely to get one of these with an address of someone else in our
mail domain.

I've been hoping the spam filter would adjust and start catching these
things but that doesn't appear to be happening.

Anyone else getting these? If so, have you been able to come up with a
technique or setting to catch these?

Thanks for you help

-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
-
  Please visit qmailtoaster.com for the latest news, updates, and packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



  

--
Cecil Yother, Jr. "cj"
cj's
2318 Clement Ave
Alameda, CA 94501

tel 510.865.2787 | fax 510.864.7300
http://yother.com


-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
  Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com




  
  
-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


  




-
Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam masquerade

[PACOI]

Thanks

how install spamdyke?


On Fri, Feb 19, 2010 at 11:08 AM, Dave Hallowell d...@acbsco.com wrote:
 Pacoi,
 Install spamdyke. Easily done via qmailtoaster plus.
 Dave

 PACOI wrote:

 This show on my logs
 @40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
 simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
 sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,use...@dominio.com
 This Ip  213.207.34.201 is not Auth for send mail
 On the mail client outlook show
 De: usua...@dominio.com [mailto:usua...@dominio.com]
 Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
 Para: usua...@dominio.com
 Asunto: Winter season sale
 This account or spam masquerade send mail for my account internal
 On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:


 I don't see a source printout.  I would be looking for a virus or
 Malware on an internal system before I'd worry about the spam filter.
 On 02/19/2010 08:17 AM, PACOI wrote:


 Hi all
 For the last month we've been getting a lot of SPAM that shows as an
 internal e-mail, mainly Viagra ads. I've included the source printout
 for reference. This one shows that I sent it to myself but it's just
 as likely to get one of these with an address of someone else in our
 mail domain.
 I've been hoping the spam filter would adjust and start catching these
 things but that doesn't appear to be happening.
 Anyone else getting these? If so, have you been able to come up with a
 technique or setting to catch these?
 Thanks for you help
 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and installations.
       If you need professional help with your setup, contact them today!
 -
      Please visit qmailtoaster.com for the latest news, updates, and
 packages.
       To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
      For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com


 --
 Cecil Yother, Jr. cj
 cj's
 2318 Clement Ave
 Alameda, CA  94501
 tel 510.865.2787 | fax 510.864.7300
 http://yother.com
 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
    Vickers Consulting Group offers Qmailtoaster support and installations.
      If you need professional help with your setup, contact them today!
 -
     Please visit qmailtoaster.com for the latest news, updates, and
 packages.
      To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
     For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and installations.
   If you need professional help with your setup, contact them today!
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages.

   To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
 support and installations. If you need professional help with your setup,
 contact them today!
 -
 Please visit qmailtoaster.com for the latest news, updates, and packages. To
 unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
 additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.

  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] spam masquerade

[Scott Hughes]

Pacoi,

Try this:  http://wiki.qmailtoaster.com/index.php/Spamdyke

Scott


On Fri, Feb 19, 2010 at 11:11 AM, PACOI ppa...@gmail.com wrote:

 Thanks

 how install spamdyke?


 On Fri, Feb 19, 2010 at 11:08 AM, Dave Hallowell d...@acbsco.com wrote:
  Pacoi,
  Install spamdyke. Easily done via qmailtoaster plus.
  Dave
 
  PACOI wrote:
 
  This show on my logs
  @40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
  simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
  sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,
 use...@dominio.com
  This Ip  213.207.34.201 is not Auth for send mail
  On the mail client outlook show
  De: usua...@dominio.com [mailto:usua...@dominio.com]
  Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
  Para: usua...@dominio.com
  Asunto: Winter season sale
  This account or spam masquerade send mail for my account internal
  On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:
 
 
  I don't see a source printout.  I would be looking for a virus or
  Malware on an internal system before I'd worry about the spam filter.
  On 02/19/2010 08:17 AM, PACOI wrote:
 
 
  Hi all
  For the last month we've been getting a lot of SPAM that shows as an
  internal e-mail, mainly Viagra ads. I've included the source printout
  for reference. This one shows that I sent it to myself but it's just
  as likely to get one of these with an address of someone else in our
  mail domain.
  I've been hoping the spam filter would adjust and start catching these
  things but that doesn't appear to be happening.
  Anyone else getting these? If so, have you been able to come up with a
  technique or setting to catch these?
  Thanks for you help
 
 -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and
 installations.
If you need professional help with your setup, contact them today!
 
 -
   Please visit qmailtoaster.com for the latest news, updates, and
  packages.
To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
  --
  Cecil Yother, Jr. cj
  cj's
  2318 Clement Ave
  Alameda, CA  94501
  tel 510.865.2787 | fax 510.864.7300
  http://yother.com
 
 -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
 Vickers Consulting Group offers Qmailtoaster support and
 installations.
   If you need professional help with your setup, contact them today!
 
 -
  Please visit qmailtoaster.com for the latest news, updates, and
  packages.
   To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
  For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
  Vickers Consulting Group offers Qmailtoaster support and
 installations.
If you need professional help with your setup, contact them today!
 
 -
   Please visit qmailtoaster.com for the latest news, updates, and
  packages.
 
To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
   For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
 
 -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
  support and installations. If you need professional help with your setup,
  contact them today!
 
 -
  Please visit qmailtoaster.com for the latest news, updates, and
 packages. To
  unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
  additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group (
 www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!

 -
 Please visit qmailtoaster.com for the latest news, updates, and
 packages.

  To unsubscribe, e-mail:
 

Re: [qmailtoaster] spam masquerade

[PACOI]

Thanks i see the information

On Fri, Feb 19, 2010 at 11:23 AM, Scott Hughes sonicscott9...@gmail.com wrote:
 Pacoi,

 Try this:  http://wiki.qmailtoaster.com/index.php/Spamdyke

 Scott


 On Fri, Feb 19, 2010 at 11:11 AM, PACOI ppa...@gmail.com wrote:

 Thanks

 how install spamdyke?


 On Fri, Feb 19, 2010 at 11:08 AM, Dave Hallowell d...@acbsco.com wrote:
  Pacoi,
  Install spamdyke. Easily done via qmailtoaster plus.
  Dave
 
  PACOI wrote:
 
  This show on my logs
  @40004b7eb3e92976a984.s:@40004b7eb34d1874c7c4
  simscan:[12068]:CLEAN (3.60/12.00):6.4754s:Winter season
 
  sale:213.207.34.201:strongerzo...@autocad2002.ru:usua...@dominio.com:,use...@dominio.com
  This Ip  213.207.34.201 is not Auth for send mail
  On the mail client outlook show
  De: usua...@dominio.com [mailto:usua...@dominio.com]
  Enviado el: Viernes, 19 de Febrero de 2010 09:50 a.m.
  Para: usua...@dominio.com
  Asunto: Winter season sale
  This account or spam masquerade send mail for my account internal
  On Fri, Feb 19, 2010 at 10:32 AM, Maxwell Smart c...@yother.com wrote:
 
 
  I don't see a source printout.  I would be looking for a virus or
  Malware on an internal system before I'd worry about the spam filter.
  On 02/19/2010 08:17 AM, PACOI wrote:
 
 
  Hi all
  For the last month we've been getting a lot of SPAM that shows as an
  internal e-mail, mainly Viagra ads. I've included the source printout
  for reference. This one shows that I sent it to myself but it's just
  as likely to get one of these with an address of someone else in our
  mail domain.
  I've been hoping the spam filter would adjust and start catching these
  things but that doesn't appear to be happening.
  Anyone else getting these? If so, have you been able to come up with a
  technique or setting to catch these?
  Thanks for you help
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
  installations.
        If you need professional help with your setup, contact them today!
 
  -
       Please visit qmailtoaster.com for the latest news, updates, and
  packages.
        To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
       For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
  --
  Cecil Yother, Jr. cj
  cj's
  2318 Clement Ave
  Alameda, CA  94501
  tel 510.865.2787 | fax 510.864.7300
  http://yother.com
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
     Vickers Consulting Group offers Qmailtoaster support and
  installations.
       If you need professional help with your setup, contact them today!
 
  -
      Please visit qmailtoaster.com for the latest news, updates, and
  packages.
       To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
      For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com)
      Vickers Consulting Group offers Qmailtoaster support and
  installations.
        If you need professional help with your setup, contact them today!
 
  -
       Please visit qmailtoaster.com for the latest news, updates, and
  packages.
 
        To unsubscribe, e-mail:
  qmailtoaster-list-unsubscr...@qmailtoaster.com
       For additional commands, e-mail:
  qmailtoaster-list-h...@qmailtoaster.com
 
 
 
  -
  Qmailtoaster is sponsored by Vickers Consulting Group
  (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
  support and installations. If you need professional help with your
  setup,
  contact them today!
 
  -
  Please visit qmailtoaster.com for the latest news, updates, and
  packages. To
  unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For
  additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


 -
 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
    Vickers Consulting Group offers Qmailtoaster support and installations.
      If you need professional help with your setup, contact them today!

 -
     Please visit 

Re: [qmailtoaster] Spam folder

[Jake Vickers]

On 02/12/2010 03:49 PM, Scott Hughes wrote:
On Fri, Feb 12, 2010 at 1:23 PM, Jacob Vickers j...@qmailtoaster.com 
mailto:j...@qmailtoaster.com wrote:


 The SPAM folder is only shown if the user is using IMAP or webmail.
 I don't know how or why the SPAM would be reaching them though.

 On 02/12/2010 10:59 AM, Scott Hughes wrote:
 I have configured QMT to utilize spambox. To do this I used the QMT
 wiki and watched the video.

 My problem is that my users are getting spam (marked as
***SPAM***) in
 thier Inbox. No folder is being created.

 I have completely stopped, verified full stop and restarted QMT.

 I cannot find anything via wiki/FAQ/google. Any suggestions?



We need to see a message header to answer this better. The ISO you
used
already had the spambox enabled.
A message is MARKED as spam when it reaches a score of 5.0 (unless you
changed this in the /etc/mail/spamassassin/local.cf
http://local.cf/ file). To get moved
into the Spam folder, it has to hit a different score (in
/etc/mail/mailfilter and is 8.0 I believe.). When a message
hits that
score, it will get moved into the Spam folder (if the folder does not
exist, one is created). When a message hits a score of 12.0 or more (I
think 12 is the default, and is defined in the
/var/qmail/control/simcontrol file, spam_hits) it gets deleted and
never
delivered to the user.

And as Maxwell (real names change to protect the innocent) stated,
this
will only be visible if the user is using imap or webmail (webmail
uses
imap).

Hope that helps.

Here is the information: local.cf http://local.cf req. score=4  /  
mailfilter =4  / spam_hits: 12

Here is a header:
Return-Path: 
Delivered-To: myemailu...@greenwoodfordlm.com 
mailto:myemailu...@greenwoodfordlm.com

Received: (qmail 22984 invoked by uid 89); 12 Feb 2010 20:36:40 -
Received: by simscan 1.4.0 ppid: 22972, pid: 22974, t: 5.2698s
 scanners: attach: 1.4.0 clamav: 0.95.1/m:51/d:10387 spam: 3.2.5
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on 
mail.renshawauto.net http://mail.renshawauto.net

X-Spam-Level: *
X-Spam-Status: Yes, score=9.2 required=4.0 tests=FORGED_MUA_OUTLOOK,


So you're saying it is not putting the messages in the Spam folder after 
these changes? Did you reload spamd after changing the local.cf? Did you 
qmailctl cdb after changing the simcontrol file?
If so and it is still not putting the messages where you expect, I would 
suspect that it was not compiled with the spambox flag, or the spam 
detection is turned off for this user. You can see what maildrop is 
doing when it moves the messages by watching the 
/var/log/maildrop/maildrop.log file.

[qmailtoaster] Spam folder

[Scott Hughes]

I have configured QMT to utilize spambox. To do this I used the QMT  
wiki and watched the video.


My problem is that my users are getting spam (marked as ***SPAM***) in  
thier Inbox. No folder is being created.


I have completely stopped, verified full stop and restarted QMT.

I cannot find anything via wiki/FAQ/google. Any suggestions?

Thanks!


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam folder

[Maxwell Smart]

The SPAM folder is only shown if the user is using IMAP or webmail.
I don't know how or why the SPAM would be reaching them though.

On 02/12/2010 10:59 AM, Scott Hughes wrote:
 I have configured QMT to utilize spambox. To do this I used the QMT
 wiki and watched the video.

 My problem is that my users are getting spam (marked as ***SPAM***) in
 thier Inbox. No folder is being created.

 I have completely stopped, verified full stop and restarted QMT.

 I cannot find anything via wiki/FAQ/google. Any suggestions?

 Thanks!


 -

 Qmailtoaster is sponsored by Vickers Consulting Group
 (www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
 installations.
  If you need professional help with your setup, contact them today!
 -

 Please visit qmailtoaster.com for the latest news, updates, and
 packages.
 To unsubscribe, e-mail:
 qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail:
 qmailtoaster-list-h...@qmailtoaster.com



-- 
Cecil Yother, Jr. cj
cj's
2318 Clement Ave
Alameda, CA  94501

tel 510.865.2787 | fax 510.864.7300
http://yother.com


-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
  If you need professional help with your setup, contact them today!
-
 Please visit qmailtoaster.com for the latest news, updates, and packages.
 
  To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
 For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Spam folder

[Scott Hughes]

On Fri, Feb 12, 2010 at 1:23 PM, Jacob Vickers j...@qmailtoaster.comwrote:

  The SPAM folder is only shown if the user is using IMAP or webmail.
  I don't know how or why the SPAM would be reaching them though.
 
  On 02/12/2010 10:59 AM, Scott Hughes wrote:
  I have configured QMT to utilize spambox. To do this I used the QMT
  wiki and watched the video.
 
  My problem is that my users are getting spam (marked as ***SPAM***) in
  thier Inbox. No folder is being created.
 
  I have completely stopped, verified full stop and restarted QMT.
 
  I cannot find anything via wiki/FAQ/google. Any suggestions?
 


 We need to see a message header to answer this better. The ISO you used
 already had the spambox enabled.
 A message is MARKED as spam when it reaches a score of 5.0 (unless you
 changed this in the /etc/mail/spamassassin/local.cf file). To get moved
 into the Spam folder, it has to hit a different score (in
 /etc/mail/mailfilter and is 8.0 I believe.). When a message hits that
 score, it will get moved into the Spam folder (if the folder does not
 exist, one is created). When a message hits a score of 12.0 or more (I
 think 12 is the default, and is defined in the
 /var/qmail/control/simcontrol file, spam_hits) it gets deleted and never
 delivered to the user.

 And as Maxwell (real names change to protect the innocent) stated, this
 will only be visible if the user is using imap or webmail (webmail uses
 imap).

 Hope that helps.



Here is the information:  local.cf req. score=4  /  mailfilter  =4  /
spam_hits: 12

Here is a header:

Return-Path: 
Delivered-To: myemailu...@greenwoodfordlm.com
Received: (qmail 22984 invoked by uid 89); 12 Feb 2010 20:36:40 -
Received: by simscan 1.4.0 ppid: 22972, pid: 22974, t: 5.2698s
 scanners: attach: 1.4.0 clamav: 0.95.1/m:51/d:10387 spam: 3.2.5
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail.renshawauto.net
X-Spam-Level: *
X-Spam-Status: Yes, score=9.2 required=4.0 tests=FORGED_MUA_OUTLOOK,
 FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,
 MIME_HTML_ONLY,MSGID_FROM_MTA_HEADER,MSOE_MID_WRONG_CASE,RDNS_NONE
 autolearn=no version=3.2.5
X-Spam-Report:
 *  0.0 HTML_MESSAGE BODY: HTML included in message
 *  1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
 *  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
 *  0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
 *  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
 *  1.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
 *  0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
 *  1.5 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
 *  4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from unknown (HELO omr10.networksolutionsemail.com)
(205.178.146.60)
  by mail.renshawauto.net with SMTP; 12 Feb 2010 20:36:35 -
Received-SPF: none (mail.renshawauto.net: domain at
omr10.networksolutionsemail.com does not designate permitted sender hosts)
Received: from mail.networksolutionsemail.com (
mail.networksolutionsemail.com [205.178.146.50])
 by omr10.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
o1CKaSmI010042
 for myemailu...@greenwoodfordlm.com; Fri, 12 Feb 2010 15:36:29 -0500
Message-Id: 201002122036.o1ckasmi010...@omr10.networksolutionsemail.com
Received: (qmail 19555 invoked by uid 78); 12 Feb 2010 20:36:26 -
Received: from unknown (HELO User) (peros...@akirika.org@41.208.135.2)
  by ns-omr1.lb.hosting.dc2.netsol.com with SMTP; 12 Feb 2010 20:36:26 -
Reply-To: groffice...@rediffmail.com
From: Greg StevensonGreg
Stevenson@omr10.networksolutionsemail.com%22greg%20stevenson...@omr10.networksolutionsemail.com

To: groffi...@imf.org
Subject: ***SPAM*** Contact Me Asap
Date: Fri, 12 Feb 2010 20:35:57 -
MIME-Version: 1.0
Content-Type: text/html;
 charset=Windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.
X-Spam-Prev-Subject: Contact Me Asap

Thanks!

[qmailtoaster] spam outgoing from host

[David Milholen]

Hi All,
I have a customer on my net that has a machine that seems to be spewing 
some spam from it. So that I have a better understanding of how this 
occurs any explanations would be helpful.


Here is what I received from Junkmailfilter. The 208.44.160.xxx hosts 
are on my network.

I just want to know how his machine is doing this?


This is an automated email abuse report from the folks at junkemailfilter.com for an email message received from IP address [208.44.160.90] on . 


We hope this information will help you in determining the source of the problem 
and shut it down. The original message is attached in MIME format with complete 
headers. For more information about this standardized abuse report format [ARF] 
please visit http://www.mipassoc.org/arf/ If you would prefer abuse reports in 
text format let us know.

If you have any questions or feedback about this abuse report or are interested 
in learning about our spam filtering technology feel free to contact us. If 
this is not spam please accept our apologies and let us know so we can fix the 
problem. Pay close attention to the REASON listed.
Marc Perkel - Fearless Leader
Junk Email Filter dot com
http://www.junkemailfilter.com
err...@junkemailfilter.com

* Date:
* From:Generic VIAGRA (c) Best Supplier bydyzijym6...@wletc.com

* Subject: Visitor mary's personal 80% OFF
* Host:can-208-44-160-90.wletc.com [208.44.160.90]
* Reason:  MULTI-BLACKLIST - can-208-44-160-90.wletc.com (wletc.com) 
[208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] -  OurBl BlList - 
X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90] HELO=[wletc.com] 
f=[bydyzijym6...@wletc.com] t=[m...@zme

For more information about these abuse reports: 
http://wiki.junkemailfilter.com/index.php/Spam_abuse
To test or be removed from our blacklist: 
http://ipadmin.junkemailfilter.com/remove.php?ip=208.44.160.90

 Original Headers 

Received: from can-208-44-160-90.wletc.com ([208.44.160.90] helo=wletc.com)
by euclid.junkemailfilter.com with esmtps (TLSv1:RC4-MD5:128)
(Exim 4.71)
id 1NNlsS-0001hk-6w on interface=65.49.42.62
for m...@zment.com; Thu, 24 Dec 2009 03:29:08 -0800
From: Generic VIAGRA (c) Best Supplier bydyzijym6...@wletc.com
To: m...@zment.com
Subject: Visitor mary's personal 80% OFF
MIME-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Sender-Domain: wletc.com
X-Spamfilter-host: euclid.junkemailfilter.com - http://www.junkemailfilter.com
X-Mail-from: bydyzijym6...@wletc.com
X-Spam-Class: SPAM-HIGH-VERY - MULTI-BLACKLIST - can-208-44-160-90.wletc.com 
(wletc.com) [208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] -  OurBl 
BlList - X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90] 
HELO=[wletc.com] f=[bydyzijym6...@wletc.com] t=[m...@zment.com] S=[Visitor 
mary's personal 80% OFF]
X-Honeypot: Yes - MULTI-BLACKLIST - can-208-44-160-90.wletc.com (wletc.com) 
[208.44.160.90] - [S=6 - cbl.abuseat.org bl.spamcop.net] -  OurBl BlList - 
X=euclid H=can-208-44-160-90.wletc.com [208.44.160.90] HELO=[wletc.com] 
f=[bydyzijym6...@wletc.com] t=[m...@zment.com] S=[Visitor mary's personal 80% 
OFF]
X-Abuse-email: 
X-Abuse-email: dmilho...@wletc.com

X-Sender-Host-Address: 208.44.160.90
X-Sender-Host-Name: can-208-44-160-90.wletc.com
X-Original-helo: wletc.com



Feedback-Type: abuse
User-Agent: JunkEmailFilter - Abuse Reporter/1.0 - Testing - Feedback 
Appreciated
Version: 0.1
Original-Mail-From: Generic VIAGRA (c) Best Supplier bydyzijym6...@wletc.com
Original-Rcpt-To: m...@zment.com
Received-Date: 
Source-IP: 208.44.160.90





Thanks
---Dave

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] ***SPAM*** Non existing senders accepted

[PakOgah]

Eric Shubert wrote:

Jake Vickers wrote:

Alberto Maffini wrote:
Dear list, maybe this is only in my mind, but the log show below 

 
@40004a2a447c1e2b618c tcpserver: pid 6142 from 92.255.211.55
@40004a2a447c299d57dc tcpserver: ok 6142 
ariel.sylcomed.com:192.168.1.251:25 :92.255.211.55::1837
@40004a2a44822e117adc CHKUSER accepted sender: from 
voe...@sylcomed.com mailto:voe...@sylcomed.com:: remote 
92.255.211.55:unknown:92.255.211.55 rcpt  : sender accepted

@40004a2a4483004d916c tcpserver: end 6142 status 0
@40004a2a4483004d993c tcpserver: status: 0/100
means that voe...@sylcomed.com mailto:voe...@sylcomed.com , user 
account that not exist in real life, can send mail from my server ?
 
If yes, how can avoid this ? and restrict the senders only at real 
accounts ?
 
Thanks for all your work


Your server is accepting a message for a null sender ( the  ). You 
must accept these messages as they are normally bounces.
Your server looks to be functioning correctly. If you are unsure you 
can show us your tcp.smtp file or you can check your server out here:

http://www.checkor.com/



This would make a nice FAQ item on the wiki. Would someone care to 
handle it?



sorry for late respond, its done
http://wiki.qmailtoaster.com/index.php/FAQs#Non_existing_senders_accepted

-
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
 If you need professional help with your setup, contact them today!
-
Please visit qmailtoaster.com for the latest news, updates, and packages.

 To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com