Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Derek Ragona

Did you compile the access database?

Typically done with:
/usr/sbin/makemap hash /etc/mail/access  /etc/mail/access

-Derek


At 08:54 PM 3/28/2006, Mikhail Teterin wrote:

צ×ÔÏÒÏË 28 ÂÅÒÅÚÅÎØ 2006 18:55, Derek Ragona ÎÁÐÉÓÁ×:
 Block that in /etc/mail/access instead, use this syntax:
 @example.comERROR:550  No spam, thanks

 Note the leading space and use of double quotes.

Nope, that went back to saying User unknown instead of No spam...

Thanks!

-mi

 At 01:22 PM 3/28/2006, Mikhail Teterin wrote:
 Hi!
 
 I host a domain with a handful of real addresses. I noticed, that
 spammers are using a variety of random-generated names @mydomain and wish
 to block such addresses with No spam responses instead of User
  unknown.
 
 Here is (almost) what I have in the virtusertable:
 
  [EMAIL PROTECTED]  foo
  [EMAIL PROTECTED]bar
  @example.com  error:5.7.0:550 No spam, thanks
 
 I can see the No spam,thanks messages logged in the maillog (without the
 space after coma, for some reason), but there is no reject=550 message
 logged (which interferes with my other software) and some of these
 messages seem to pass through (although others are intercepted by other
 anti-spam defenses).
 
 For example, here are the only two log entries, that a spam message
  generates:
 
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 [EMAIL PROTECTED]... No spam,thanks
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, proto=ESMTP,
 daemon=MTA, relay=example.example.net [xx.x.xx.xxx]
 
 Despite the No spam,thanks the message was accepted.
 
 What am I doing wrong? Thanks!
 
  -mi
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
  [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Mikhail Teterin
On Wednesday 29 March 2006 08:39 am, Derek Ragona wrote:
= Did you compile the access database?
= 
= Typically done with:
= /usr/sbin/makemap hash /etc/mail/access  /etc/mail/access

I run `make' in /etc/mail, which takes care of this. Thanks.

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Mikhail Teterin
On Wednesday 29 March 2006 12:35 am, Glenn Dawson wrote:
= I saw that, but you had that part right...I thought the only
= problem was with getting the reject message to work properly.
= 
= Anyway...
= 
= This is what I typically do:
= 
= [EMAIL PROTECTED]           localaccount1
= [EMAIL PROTECTED]           localaccount2
= @bar.com              error:nouser 550 No such user here

Glenn, this is exactly what I have according to my initial posting
in this thread. I took the example from sendmail's cf/README:

= Here is (almost) what I have in the virtusertable:
= 
=   [EMAIL PROTECTED]  foo
=   [EMAIL PROTECTED]bar
=   @example.com  error:5.7.0:550 No spam, thanks

Unfortunately, as I write in that initial posting, although it does have
some effect, it does not seem sufficient:

= I can see the No spam,thanks messages logged in the maillog 
= (without the space after coma, for some reason), but there is 
= no reject=550 message logged (which interferes with my other 
= software) and some of these messages seem to pass through 
= (although others are intercepted by other anti-spam defenses).
= 
= For example, here are the only two log entries, that a spam 
= message generates:
= 
= Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: [EMAIL 
PROTECTED]... No spam,thanks
= Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: from=[EMAIL 
PROTECTED], size=3305, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, 
relay=example.example.net [xx.x.xx.xxx]
= 
= Despite the No spam,thanks the message was accepted.
= 
= What am I doing wrong? Thanks!

Yours,

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Derek Ragona
If your access db is not being used, your sendmail configuration is not 
setup to use that.


-Derek

At 08:12 AM 3/29/2006, Mikhail Teterin wrote:

On Wednesday 29 March 2006 08:39 am, Derek Ragona wrote:
= Did you compile the access database?
=
= Typically done with:
= /usr/sbin/makemap hash /etc/mail/access  /etc/mail/access

I run `make' in /etc/mail, which takes care of this. Thanks.

-mi

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Chuck Swiger
Glenn Dawson wrote:
[ ... ]
 This is what I typically do:
 
 [EMAIL PROTECTED]   localaccount1
 [EMAIL PROTECTED]   localaccount2
 @bar.com  error:nouser 550 No such user here
 
 Note that the order of the entries is important, the catch-all has to be
 at the end.  Organizationally, I typically keep all the @bar.com type
 entries at the end of the file and group the others before those in
 whatever way makes the most sense.

These files get turned into hash databases using makemap (ie, when you cd
/etc/mail  make all); the order of entries is not significant.

What is significant is that the MTA will look up more specific entries before
looking up general entries, so it will try looking up [EMAIL PROTECTED] before
looking up example.com, so the more specific match will win.

-- 
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Glenn Dawson

At 06:17 AM 3/29/2006, Mikhail Teterin wrote:

On Wednesday 29 March 2006 12:35 am, Glenn Dawson wrote:
= I saw that, but you had that part right...I thought the only
= problem was with getting the reject message to work properly.
=
= Anyway...
=
= This is what I typically do:
=
= [EMAIL PROTECTED]   localaccount1
= [EMAIL PROTECTED]   localaccount2
= @bar.com  error:nouser 550 No such user here

Glenn, this is exactly what I have according to my initial posting
in this thread.


Exactly, which is why I didn't think there was a problem with most of 
it, as re-stated above, and now again, here.



I took the example from sendmail's cf/README:

= Here is (almost) what I have in the virtusertable:
=
=   [EMAIL PROTECTED]  foo
=   [EMAIL PROTECTED]bar
=   @example.com  error:5.7.0:550 No spam, thanks

Unfortunately, as I write in that initial posting, although it does have
some effect, it does not seem sufficient:

= I can see the No spam,thanks messages logged in the maillog
= (without the space after coma, for some reason), but there is
= no reject=550 message logged (which interferes with my other
= software)


What does other software refer to in this case?


and some of these messages seem to pass through
= (although others are intercepted by other anti-spam defenses).
=
= For example, here are the only two log entries, that a spam
= message generates:
=
= Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
[EMAIL PROTECTED]... No spam,thanks
= Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, 
proto=ESMTP, daemon=MTA, relay=example.example.net [xx.x.xx.xxx]

=
= Despite the No spam,thanks the message was accepted.


I don't see anything in the log entries above to indicate that the 
message was accepted at all.  What makes you think that it was?


On a general note, you may want to include the delay_checks 
feature.  That will allow sendmail to get most of the info about a 
message before seeing if it should be rejected or not.  If nothing 
else it allows you to have more meaningful log info on rejected mail.


-Glenn


=
= What am I doing wrong? Thanks!

Yours,

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-29 Thread Mikhail Teterin
середа 29 березень 2006 10:28, Glenn Dawson написав:
 = Despite the No spam,thanks the message was accepted.

 I don't see anything in the log entries above to indicate that the
 message was accepted at all.  What makes you think that it was?

First, there was no rejection entry in the maillog. Second -- and most 
importantly -- I found this particular spam-message in the spam mailbox.

Thanks,

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: virtusertable blocking seems to have no effect

2006-03-28 Thread Erin Fortenberry
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Mikhail Teterin
 Sent: Tuesday, March 28, 2006 2:23 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: virtusertable blocking seems to have no effect
 
 Hi!
 
 I host a domain with a handful of real addresses. I 
 noticed, that spammers are using a variety of 
 random-generated names @mydomain and wish to block such 
 addresses with No spam responses instead of User unknown.
 
 Here is (almost) what I have in the virtusertable:
 
   [EMAIL PROTECTED]  foo
   [EMAIL PROTECTED]bar
   @example.com  error:5.7.0:550 No spam, thanks
 
 I can see the No spam,thanks messages logged in the maillog 
 (without the space after coma, for some reason), but there is 
 no reject=550 message logged (which interferes with my other 
 software) and some of these messages seem to pass through 
 (although others are intercepted by other anti-spam defenses).
 
 For example, here are the only two log entries, that a spam 
 message generates:
 
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
 [EMAIL PROTECTED]... No spam,thanks
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
 from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, 
 proto=ESMTP, daemon=MTA, relay=example.example.net [xx.x.xx.xxx]
 
 Despite the No spam,thanks the message was accepted.
 
 What am I doing wrong? Thanks!


Your users that are getting SPAM are in a BCC field.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-28 Thread Derek Ragona

Block that in /etc/mail/access instead, use this syntax:
@example.comERROR:550  No spam, thanks

Note the leading space and use of double quotes.

-Derek


At 01:22 PM 3/28/2006, Mikhail Teterin wrote:

Hi!

I host a domain with a handful of real addresses. I noticed, that 
spammers are using a variety of random-generated names @mydomain and wish 
to block such addresses with No spam responses instead of User unknown.


Here is (almost) what I have in the virtusertable:

[EMAIL PROTECTED]  foo
[EMAIL PROTECTED]bar
@example.com  error:5.7.0:550 No spam, thanks

I can see the No spam,thanks messages logged in the maillog (without the 
space after coma, for some reason), but there is no reject=550 message 
logged (which interferes with my other software) and some of these 
messages seem to pass through (although others are intercepted by other 
anti-spam defenses).


For example, here are the only two log entries, that a spam message generates:

Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
[EMAIL PROTECTED]... No spam,thanks
Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026: 
from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, proto=ESMTP, 
daemon=MTA, relay=example.example.net [xx.x.xx.xxx]


Despite the No spam,thanks the message was accepted.

What am I doing wrong? Thanks!

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-28 Thread Mikhail Teterin
вівторок 28 березень 2006 18:55, Derek Ragona написав:
 Block that in /etc/mail/access instead, use this syntax:
 @example.comERROR:550  No spam, thanks

 Note the leading space and use of double quotes.

Nope, that went back to saying User unknown instead of No spam...

Thanks!

-mi

 At 01:22 PM 3/28/2006, Mikhail Teterin wrote:
 Hi!
 
 I host a domain with a handful of real addresses. I noticed, that
 spammers are using a variety of random-generated names @mydomain and wish
 to block such addresses with No spam responses instead of User
  unknown.
 
 Here is (almost) what I have in the virtusertable:
 
  [EMAIL PROTECTED]  foo
  [EMAIL PROTECTED]bar
  @example.com  error:5.7.0:550 No spam, thanks
 
 I can see the No spam,thanks messages logged in the maillog (without the
 space after coma, for some reason), but there is no reject=550 message
 logged (which interferes with my other software) and some of these
 messages seem to pass through (although others are intercepted by other
 anti-spam defenses).
 
 For example, here are the only two log entries, that a spam message
  generates:
 
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 [EMAIL PROTECTED]... No spam,thanks
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, proto=ESMTP,
 daemon=MTA, relay=example.example.net [xx.x.xx.xxx]
 
 Despite the No spam,thanks the message was accepted.
 
 What am I doing wrong? Thanks!
 
  -mi
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
  [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-28 Thread Glenn Dawson

At 06:54 PM 3/28/2006, Mikhail Teterin wrote:

צ×ÔÏÒÏË 28 ÂÅÒÅÚÅÎØ 2006 18:55, Derek Ragona ÎÁÐÉÓÁ×:
 Block that in /etc/mail/access instead, use this syntax:
 @example.comERROR:550  No spam, thanks

 Note the leading space and use of double quotes.

Nope, that went back to saying User unknown instead of No spam...


I use this in my virtusertable:

[EMAIL PROTECTED]  error:nouser 550 No such user here

but you should be able to change the message half of that with no trouble.

That generates the following in my sendmail logs:

Mar 28 18:43:08 foo sendmail[11056]: 
k2T2g3Le011056: [EMAIL PROTECTED]... No such user here
Mar 28 18:43:11 foo sendmail[11056]: 
k2T2g3Le011056: lost input channel from 
200-100-163-150.dial-up.telesp.net.br [200.100.163.150] to MTA after rcpt
Mar 28 18:43:11 foo sendmail[11056]: 
k2T2g3Le011056: from=[EMAIL PROTECTED], size=0, 
class=0, nrcpts=0, proto=SMTP, daemon=MTA, 
relay=200-100-163-150.dial-up.telesp.net.br [200.100.163.150]



-Glenn




Thanks!

-mi

 At 01:22 PM 3/28/2006, Mikhail Teterin wrote:
 Hi!
 
 I host a domain with a handful of real addresses. I noticed, that
 spammers are using a variety of random-generated names @mydomain and wish
 to block such addresses with No spam responses instead of User
  unknown.
 
 Here is (almost) what I have in the virtusertable:
 
  [EMAIL PROTECTED]  foo
  [EMAIL PROTECTED]bar
  @example.com  error:5.7.0:550 No spam, thanks
 
 I can see the No spam,thanks messages logged in the maillog (without the
 space after coma, for some reason), but there is no reject=550 message
 logged (which interferes with my other software) and some of these
 messages seem to pass through (although others are intercepted by other
 anti-spam defenses).
 
 For example, here are the only two log entries, that a spam message
  generates:
 
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 [EMAIL PROTECTED]... No spam,thanks
 Mar 28 13:45:58 corbulon sendmail[40026]: k2SIjvvb040026:
 from=[EMAIL PROTECTED], size=3305, class=0, nrcpts=0, proto=ESMTP,
 daemon=MTA, relay=example.example.net [xx.x.xx.xxx]
 
 Despite the No spam,thanks the message was accepted.
 
 What am I doing wrong? Thanks!
 
  -mi
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
  [EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-28 Thread Mikhail Teterin
On Tuesday 28 March 2006 10:09 pm, Glenn Dawson wrote:
= I use this in my virtusertable:
= [EMAIL PROTECTED]          error:nouser 550 No such user here
= 
= but you should be able to change the message half of that with no trouble.

Please, review this thread from the beginning. I want some of the foos to be
accepted and forwarded, but all other @bar.com addresses to trigger a no-spam 
response.

-mi
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: virtusertable blocking seems to have no effect

2006-03-28 Thread Glenn Dawson

At 09:26 PM 3/28/2006, Mikhail Teterin wrote:

On Tuesday 28 March 2006 10:09 pm, Glenn Dawson wrote:
= I use this in my virtusertable:
= [EMAIL PROTECTED]  error:nouser 550 No such user here
=
= but you should be able to change the message half of that with no trouble.

Please, review this thread from the beginning. I want some of the foos to be
accepted and forwarded, but all other @bar.com addresses to trigger a no-spam
response.


I saw that, but you had that part right...I thought the only problem 
was with getting the reject message to work properly.


Anyway...

This is what I typically do:

[EMAIL PROTECTED]   localaccount1
[EMAIL PROTECTED]   localaccount2
@bar.com  error:nouser 550 No such user here

Note that the order of the entries is important, the catch-all has to 
be at the end.  Organizationally, I typically keep all the @bar.com 
type entries at the end of the file and group the others before those 
in whatever way makes the most sense.


-Glenn



-mi


---

Go that way, really fast.  If something gets in your way, turn.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]