Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Hello all, Not sure if I'm missing something here with spamd so I thought I'd ask the experts. I have it setup with the default config file (snipped) ; [fw1]# cat /etc/spamd.conf all:\ :spamhaus:china:korea: # Mirrored from http://spfilter.openrbl.org/data/sbl/SBL.cidr.bz2

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Brian McKerr wrote: I also have the relevant pf rule in place; [firewall]# pfctl -vsn rdr inet proto tcp from spamd to any port = smtp - 127.0.0.1 port 8025 [ Evaluations: 104628Packets: 0 Bytes: 0 States: 0 ] [ Inserted: uid 0 pid 25445 ] i'm

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Otto Moerbeek wrote: On Fri, 17 Jun 2005, Brian McKerr wrote: I also have the relevant pf rule in place; [firewall]# pfctl -vsn rdr inet proto tcp from spamd to any port = smtp - 127.0.0.1 port 8025 [ Evaluations: 104628Packets: 0 Bytes: 0 States: 0 ] [ Inserted: uid

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Steve Tornio
FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl FEATURE(`dnsbl',`sbl-xbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl Jun 17 19:49:29 inetmail sendmail[13126]: ruleset=check_relay, arg1=[210.213.176.247], arg2=127.0.0.4, relay=210.213.176.247.pldt.net

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Brian McKerr wrote: You mean a basic SMTP pass in ? This has been allowing mail to the mailserver for years, its only this week that I tried the Spamd thingo pfctl -sr | grep -i smtp pass in log quick on fxp0 proto tcp from any to any port = smtp flags S/SA

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Otto Moerbeek wrote: On Fri, 17 Jun 2005, Brian McKerr wrote: You mean a basic SMTP pass in ? This has been allowing mail to the mailserver for years, its only this week that I tried the Spamd thingo pfctl -sr | grep -i smtp pass in log quick on fxp0 proto tcp from any to any port =

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Steve Tornio wrote: FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl FEATURE(`dnsbl',`sbl-xbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl Jun 17 19:49:29 inetmail sendmail[13126]: ruleset=check_relay, arg1=[210.213.176.247], arg2=127.0.0.4,

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Brian McKerr
Steve Tornio wrote: Because those addresses are in the XBL, not the SBL. The XBL is populated by entries from the CBL, which are added when virus-like or worm-like behavior is detected, and entries are removed at the first request. Doesn't really make a whole lot of sense to try to create a

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Andre Lucas
Tornio Sent: vrijdag 17 juni 2005 15:36 To: Brian McKerr Cc: misc@openbsd.org Subject: Re: Snapshot from 03/June : spamd working ? Because those addresses are in the XBL, not the SBL. The XBL is populated by entries from the CBL, which are added when virus-like or worm-like behavior is detected

Re: Snapshot from 03/June : spamd working ?

2005-06-17 Thread Otto Moerbeek
On Fri, 17 Jun 2005, Otto Moerbeek wrote: This looks ok. I suggest you setup a local blacklist with an IP you can use to connect to the mail machine. After that, use nc mailserver 25 from that IP to connect to the machine and you'll see what is going on. While playing with this myself, I