Re: Fetchmail/Sendmail rejects

2004-08-17 Thread SD
On Sunday 15 August 2004 00:56, Malcolm Kay wrote:
 On Sunday 15 August 2004 04:34, you wrote:
  Malcolm Kay wrote:
   I run fetchmail in daemon mode to download
   POP3 mail from my ISP.
  
   Sendmail rejects many messages as for example:
   Aug 14 16:59:33 beta sm-mta[35000]: i7E7DYje035000:
 ruleset=check_mail, arg1=[EMAIL PROTECTED],
 relay=localhost.home [127.0.0.1], reject=451
 4.1.8 Domain of sender address
   [EMAIL PROTECTED] does not resolve
  
   I am quite happy to have these rejected but it seems they don't
   get deleted at the ISP end and clog up the mail box, I think
   eventually confusing fetchmail.
  
   Is there some reasonable way of disposing of these messages. I
   would prefer not to download these into my normal user mailbox
   but I would be quite happy to divert them to some pseudo user
   setup for the purpose. I would imagine sendmail can be coaxed
   into doing this, but how?
  
   Responding to 2 or 3 lists using a valid e-mail address means
   that I receive a lot of spam including much with unresolvable
   addresses.
 
  have a look at mail/filtermail

 I've just downloaded this port and find it quite interesting. However
 it seems not to offer very much in this particular case as the
 criteria used are similar to those used by my ISP to reject mail --
 I'm able to set the level. But I don't see a way of getting
 filtermail to reject based on domain name resolution.

 Others have pointed out that spam filtering in fetchmail can be used
 to delete mail based on the error code returned by sendmail. It seems
 it might also be reasonable to change sendmail.cf to issue a 553
 error in place of the 451 as the 553 invoking messages are deleted by
 fetchmail by default.

No need. Assuming you do want to reject (trash) the email you can 
specify multiple return codes to fetchmail.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Alex de Kruijff
On Sat, Aug 14, 2004 at 05:40:58PM +0930, Malcolm Kay wrote:
 I run fetchmail in daemon mode to download
 POP3 mail from my ISP.
 
 Sendmail rejects many messages as for example:
 Aug 14 16:59:33 beta sm-mta[35000]: i7E7DYje035000: 
   ruleset=check_mail, arg1=[EMAIL PROTECTED], 
   relay=localhost.home [127.0.0.1], reject=451 
   4.1.8 Domain of sender address [EMAIL PROTECTED] 
   does not resolve
 
 I am quite happy to have these rejected but it seems they don't 
 get deleted at the ISP end and clog up the mail box, I think 
 eventually confusing fetchmail.
 
 Is there some reasonable way of disposing of these messages. I would
 prefer not to download these into my normal user mailbox but I would 
 be quite happy to divert them to some pseudo user setup for the 
 purpose. I would imagine sendmail can be coaxed into doing this, but
 how?
 
 Responding to 2 or 3 lists using a valid e-mail address means that
 I receive a lot of spam including much with unresolvable addresses.
 
 I would appreciate any ideas.

Fetchmail (nor getmail) will do this for you. I don't know of any
(other) program that allow you to do this on the client side. You can do
this if you have shell access to the ISP server with procmail. Can you
tell me if you have access to those files? (It doesn't make much sence
going in to that rigth now.)

-- 
Alex

Articles based on solutions that I use:
http://www.kruijff.org/alex/FreeBSD/
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Lowell Gilbert
Alex de Kruijff [EMAIL PROTECTED] writes:

 On Sat, Aug 14, 2004 at 05:40:58PM +0930, Malcolm Kay wrote:

  Is there some reasonable way of disposing of these messages.
 
 Fetchmail (nor getmail) will do this for you.

Specifically, see the SPAM FILTERING section of the fetchmail(1)
manual, and the --antispam option.  

Figure out what kind of error response sendmail is giving for the
problem messages, and make sure fetchmail knows that it is allowed to
throw those messages away.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Malcolm Kay
On Saturday 14 August 2004 23:37, Chuck Swiger wrote:
 Malcolm Kay wrote:
 [ ... ]

  I am quite happy to have these rejected but it seems they don't
  get deleted at the ISP end and clog up the mail box, I think
  eventually confusing fetchmail.

 You ought to convince your ISP to apply better spam filtering before they
 accept messages for you, which will reduce the problem you see.


I agree except that my ISP already provides extensive SPAM filtering. The 
problem is with those that don't trip the ISP's spam filter. I am able to 
set the spam trigger level -- maybe I should be setting this lower. But
I don't believe unsolvable addresses is included in his criteria.

  Responding to 2 or 3 lists using a valid e-mail address means that
  I receive a lot of spam including much with unresolvable addresses.

 Nowadays, you can receive a lot of spam regardless of what you do, so it
 helps to reject most of it immediately.

Agreed

Malcolm

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread SD
On Saturday 14 August 2004 09:10, Malcolm Kay wrote:
 I run fetchmail in daemon mode to download
 POP3 mail from my ISP.

 Sendmail rejects many messages as for example:
 Aug 14 16:59:33 beta sm-mta[35000]: i7E7DYje035000:
   ruleset=check_mail, arg1=[EMAIL PROTECTED],
   relay=localhost.home [127.0.0.1], reject=451
   4.1.8 Domain of sender address [EMAIL PROTECTED]
   does not resolve

 I am quite happy to have these rejected but it seems they don't
 get deleted at the ISP end and clog up the mail box, I think
 eventually confusing fetchmail.

-Z 451 on cli will have fetchmail trash all messages for which MTA 
returns code 451. There's an equivilent fetchmailrc option (antispam 
iirc).

 Is there some reasonable way of disposing of these messages. I would
 prefer not to download these into my normal user mailbox but I would
 be quite happy to divert them to some pseudo user setup for the
 purpose. I would imagine sendmail can be coaxed into doing this, but
 how?

 Responding to 2 or 3 lists using a valid e-mail address means that
 I receive a lot of spam including much with unresolvable addresses.

 I would appreciate any ideas.

 Malcolm

 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Shantanoo
Malcolm Kay wrote:
I run fetchmail in daemon mode to download
POP3 mail from my ISP.
Sendmail rejects many messages as for example:
Aug 14 16:59:33 beta sm-mta[35000]: i7E7DYje035000: 
  ruleset=check_mail, arg1=[EMAIL PROTECTED], 
  relay=localhost.home [127.0.0.1], reject=451 
  4.1.8 Domain of sender address [EMAIL PROTECTED] 
  does not resolve

I am quite happy to have these rejected but it seems they don't 
get deleted at the ISP end and clog up the mail box, I think 
eventually confusing fetchmail.

Is there some reasonable way of disposing of these messages. I would
prefer not to download these into my normal user mailbox but I would 
be quite happy to divert them to some pseudo user setup for the 
purpose. I would imagine sendmail can be coaxed into doing this, but
how?

Responding to 2 or 3 lists using a valid e-mail address means that
I receive a lot of spam including much with unresolvable addresses.
I would appreciate any ideas.
Malcolm 
have a look at mail/filtermail
Regards,
Shantanoo
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Malcolm Kay
On Sunday 15 August 2004 04:34, you wrote:
 Malcolm Kay wrote:
  I run fetchmail in daemon mode to download
  POP3 mail from my ISP.
 
  Sendmail rejects many messages as for example:
  Aug 14 16:59:33 beta sm-mta[35000]: i7E7DYje035000:
ruleset=check_mail, arg1=[EMAIL PROTECTED],
relay=localhost.home [127.0.0.1], reject=451
4.1.8 Domain of sender address [EMAIL PROTECTED]
does not resolve
 
  I am quite happy to have these rejected but it seems they don't
  get deleted at the ISP end and clog up the mail box, I think
  eventually confusing fetchmail.
 
  Is there some reasonable way of disposing of these messages. I would
  prefer not to download these into my normal user mailbox but I would
  be quite happy to divert them to some pseudo user setup for the
  purpose. I would imagine sendmail can be coaxed into doing this, but
  how?
 
  Responding to 2 or 3 lists using a valid e-mail address means that
  I receive a lot of spam including much with unresolvable addresses.


 have a look at mail/filtermail


I've just downloaded this port and find it quite interesting. However it
seems not to offer very much in this particular case as the criteria used 
are similar to those used by my ISP to reject mail -- I'm able to set the 
level. But I don't see a way of getting filtermail to reject based on 
domain name resolution.

Others have pointed out that spam filtering in fetchmail can be used to 
delete mail based on the error code returned by sendmail. It seems it 
might also be reasonable to change sendmail.cf to issue a 553 error in place
of the 451 as the 553 invoking messages are deleted by fetchmail by default.

Thanks for the thought and bringing an interesting port to my attention.

Malcolm

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Malcolm Kay
On Sunday 15 August 2004 00:12, Lowell Gilbert wrote:
 Alex de Kruijff [EMAIL PROTECTED] writes:
  On Sat, Aug 14, 2004 at 05:40:58PM +0930, Malcolm Kay wrote:
   Is there some reasonable way of disposing of these messages.
 
  Fetchmail (nor getmail) will do this for you.

 Specifically, see the SPAM FILTERING section of the fetchmail(1)
 manual, and the --antispam option.

 Figure out what kind of error response sendmail is giving for the
 problem messages, and make sure fetchmail knows that it is allowed to
 throw those messages away.

On Sunday 15 August 2004 04:15, SD wrote:

 -Z 451 on cli will have fetchmail trash all messages for which MTA
 returns code 451. There's an equivilent fetchmailrc option (antispam
 iirc).

Thanks guys for the responses -- this really looks the way to go.

Does anyone know how sendmail distinguishes between:
 reject=451 4.1.8 Domain of sender address  does not resolve
 reject=553 5.1.8 .. Domain of sender address .. does not exist
It seems the former is to be interpreted as a 'temporary' condition while the latter
is to be interpreted as 'permanent' (and is by default deleted by fetchmail)?

Thanks

Malcolm

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Chuck Swiger
Malcolm Kay wrote:
[ ... ]
Thanks guys for the responses -- this really looks the way to go.
Does anyone know how sendmail distinguishes between:
 reject=451 4.1.8 Domain of sender address  does not resolve
 reject=553 5.1.8 .. Domain of sender address .. does not exist
It seems the former is to be interpreted as a 'temporary' condition while the latter
is to be interpreted as 'permanent' (and is by default deleted by fetchmail)?
Sendmail pays attention to the return value from doing DNS queries.  If 
sendmail receives an NXDOMAIN response, it treats that as a permanent, 5xx 
failure code.  If sendmail gets a timeout/TRY_AGAIN, it will return a 4xx temp 
failure.

It's not clear to me why this would matter if your ISP is the one running the 
mailserver: they aren't accepting the message in either case, which ought to 
mean that fetchmail will never see it.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Malcolm Kay
On Sunday 15 August 2004 10:40, Chuck Swiger wrote:
 Malcolm Kay wrote:
 [ ... ]

  Thanks guys for the responses -- this really looks the way to go.
 
  Does anyone know how sendmail distinguishes between:
   reject=451 4.1.8 Domain of sender address  does not
  resolve reject=553 5.1.8 .. Domain of sender address
  .. does not exist It seems the former is to be interpreted as
  a 'temporary' condition while the latter is to be interpreted as
  'permanent' (and is by default deleted by fetchmail)?

 Sendmail pays attention to the return value from doing DNS queries.  If
 sendmail receives an NXDOMAIN response, it treats that as a permanent, 5xx
 failure code.  If sendmail gets a timeout/TRY_AGAIN, it will return a 4xx
 temp failure.


This sort of takes us back one more level -- how does the DNS service decide 
between responding with NXDOMAIN and a timeout/TRY_AGAIN? And does the
difference have any real significance?

 It's not clear to me why this would matter if your ISP is the one running
 the mailserver: they aren't accepting the message in either case, which
 ought to mean that fetchmail will never see it.

None of it is particularly clear to me -- but apparently my ISP's server is
not rejecting these messages.

If all mail servers rejected these messages it would seem to me to make the 
spammers endeavours rather pointless.

Thanks,

Malcolm

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Dan Nelson
In the last episode (Aug 15), Malcolm Kay said:
 This sort of takes us back one more level -- how does the DNS service decide 
 between responding with NXDOMAIN and a timeout/TRY_AGAIN? And does the
 difference have any real significance?

NXDOMAIN means that a server replied this domain does not exist, and
usually indicates a forged or mistyped domain.  A timeout is just that. 
No authoritative servers replied, at all.  This is usually due to
misconfiguration or server failure at the domain in question, and
mailers should retry the lookup later.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Malcolm Kay
On Sunday 15 August 2004 11:26, Malcolm Kay wrote:
 On Sunday 15 August 2004 10:40, Chuck Swiger wrote:
  Malcolm Kay wrote:
  [ ... ]
 
   Thanks guys for the responses -- this really looks the way to go.
  
   Does anyone know how sendmail distinguishes between:
reject=451 4.1.8 Domain of sender address  does not
   resolve reject=553 5.1.8 .. Domain of sender address
   .. does not exist It seems the former is to be interpreted
   as a 'temporary' condition while the latter is to be interpreted as
   'permanent' (and is by default deleted by fetchmail)?
 
  Sendmail pays attention to the return value from doing DNS queries.  If
  sendmail receives an NXDOMAIN response, it treats that as a permanent,
  5xx failure code.  If sendmail gets a timeout/TRY_AGAIN, it will return a
  4xx temp failure.

 This sort of takes us back one more level -- how does the DNS service
 decide between responding with NXDOMAIN and a timeout/TRY_AGAIN? And does
 the difference have any real significance?

  It's not clear to me why this would matter if your ISP is the one running
  the mailserver: they aren't accepting the message in either case, which
  ought to mean that fetchmail will never see it.

 None of it is particularly clear to me -- but apparently my ISP's server is
 not rejecting these messages.

 If all mail servers rejected these messages it would seem to me to make the
 spammers endeavours rather pointless.


Perhaps I've not made it clear that the above reject messages appear in the 
maillog on my local machine as a consequnce of fetchmail reposting the messages 
to local sendmail.

Malcolm

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Fetchmail/Sendmail rejects

2004-08-14 Thread Chuck Swiger
Malcolm Kay wrote:
On Sunday 15 August 2004 10:40, Chuck Swiger wrote:
[ ... ]
Sendmail pays attention to the return value from doing DNS queries.  If
sendmail receives an NXDOMAIN response, it treats that as a permanent, 5xx
failure code.  If sendmail gets a timeout/TRY_AGAIN, it will return a 4xx
temp failure.
This sort of takes us back one more level -- how does the DNS service decide 
between responding with NXDOMAIN and a timeout/TRY_AGAIN?
Dan provided a good answer to this.
And does the difference have any real significance?
The real significance is that a 5xx response means the other side should give 
up and never attempt to redeliver that message.  A 4xx response means the 
other MTA will keep retrying for several days.

You want to reject spam permanently, and you want to do it as close to the 
source as possible.  Meaning, you don't want to accept the message for 
relaying to some other machine, then have that other machine reject the 
message, because then your machine becomes responsible for generating a 
bounce.  Which then clogs up your machine when bounces for spam are not 
deliverable.

It's not clear to me why this would matter if your ISP is the one running
the mailserver: they aren't accepting the message in either case, which
ought to mean that fetchmail will never see it.
None of it is particularly clear to me -- but apparently my ISP's server is
not rejecting these messages.
You should forward the log messages you showed us to your ISP, and ask them 
what's going on.  Their mailservers should be rejecting the messages for the 
same reason your mailserver does.

[ Hmm, I suppose it could also indicate that you have problems with your local 
DNS resolver, if you are getting lots of temp failures your ISP isn't. 
Unlikely, though, but you could test by switching to using their nameservers 
if you aren't doing so already. ]

If all mail servers rejected these messages it would seem to me to make the 
spammers endeavours rather pointless.
Spammers forge mail from legitimate addresses as well, but it certainly helps 
to reject mail from invalid domains.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]