Re: Some DNSBL questions and other spam filtering options in OpenSMTPD

On Fri, Apr 08, 2016 at 03:44:16PM +0200, Joerg Jung wrote: > > On 07 Apr 2016, at 23:24, Michiel van Es wrote: > >> On 07 Apr 2016, at 21:28, Joerg Jung wrote: > >> On Thu, Apr 07, 2016 at 04:41:57PM +0200, Michiel van Es wrote: > >>>> On 07 Apr 2016, at 1

Re: Message is not RFC 2822 compliant

On Sun, May 08, 2016 at 06:44:40PM +, Peter Fraser wrote: > Testing out OpenSMTP on a test system appropriately call test > I am have a problem testing a message submitting from external system > (the sys is on the same lan) > > The tested smtpd.conf > > > listen on all > table aliases

Re: virtual user and forwarding

> Am 08.05.2016 um 20:59 schrieb Peter Fraser : > > My confusions are several, > > I believe I misunderstood how "virtual" worked, and I don't think the man > pages helped. > I started out with the believe that "virtual" would map the sender email > address in the process of relaying >

Re: OpenSMTPD + Archiveopteryx + Virtual user addresses == Baby Jesus crying

On Wed, May 18, 2016 at 01:48:11PM -0500, Chris Watson wrote: > So I’ve been brought up on Sendmail, then later Postfix. Yesterday I decided > to try moving from Postfix to OpenSMTPD. The main reason was because with > Postfix for a remote user you have to install and configure a bunch of other

Re: OpenSMTPD + Archiveopteryx + Virtual user addresses == Baby Jesus crying

> Am 18.05.2016 um 23:01 schrieb Chris Watson : > > > Chris Watson, Open Systems > ch...@open-systems.net > CEO, Owner > 316-558-0440 > > PGP Fingerprint: BE67 ED60 6BB0 6B1E 2EB8 95D0 4A35 6B4D F529 1D0D > PGP Key ID: F5291D0D > >> On May 18, 2016, a

Re: warn: Disabling incoming SMTP connections: Client limit reached

> Am 18.05.2016 um 22:57 schrieb Peter Fraser : > > I put a new smtpd live, and everything was going fine until there was the > message: > > warn: Disabling incoming SMTP connections: Client limit reached > > After that there were no more message in /var/log/maillog, and no mail was > moving

Re: OpenSMTPD + Archiveopteryx + Virtual user addresses == Baby Jesus crying

btw your SPF setup seems to be broken, as mail bounces: ch...@open-systems.net: 554 5.7.1 Service unavailable; Client host [85.214.232.249] blocked using b.barracuda.org; v=spf1 a -all > Am 19.05.2016 um 08:45 schrieb Joerg Jung : > > > >> Am 18.05.2016 um 23:01 sc

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605182041 available

Am 21.05.2016 um 12:21 schrieb parchd : >> >> A new opensmtpd-extras snapshot is available at: >> >>http://www.opensmtpd.org/archives/opensmtpd-extras-201605182041.tar.gz > > Should the SIZE_T_MAX in filter_spamassassin.c be SIZE_MAX instead? Yes, it should be. I'll fix that. > A qui

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605182041 available

> Am 21.05.2016 um 12:27 schrieb parchd : > > parchd writes: > >> >>> >>> A new opensmtpd-extras snapshot is available at: > http://www.opensmtpd.org/archives/opensmtpd-extras-201605182041.tar.gz >> >> Should the SIZE_T_MAX in filter_spamassassin.c be SIZE_MAX instead? >> A quick search aro

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605182041 available

> Am 21.05.2016 um 17:42 schrieb parchd : > > As Richard helped me realise in another thread, some options have changed > between 5.7 and 5.9 releases. > > The changes are not yet reflected in the configure options for > opensmtpd-extras. They probably should be, I think. Yes, this is already

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605182041 available

On Sat, May 21, 2016 at 02:48:56PM +0200, Joerg Jung wrote: > > Am 21.05.2016 um 12:21 schrieb parchd : > > >> > >> A new opensmtpd-extras snapshot is available at: > >> > >> > >> http://www.opensmtpd.org/archives/opensmtpd-extras

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605182041 available

On Sat, May 21, 2016 at 05:46:50PM +0200, Joerg Jung wrote: > > > > Am 21.05.2016 um 17:42 schrieb parchd : > > > > As Richard helped me realise in another thread, some options have changed > > between 5.7 and 5.9 releases. > > > > The changes are

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605212201 available

> Am 22.05.2016 um 02:12 schrieb Richard : > >> On Sat, 21 May 2016, j...@poolp.org wrote: >> >> A new opensmtpd-extras snapshot is available at: >> >>http://www.opensmtpd.org/archives/opensmtpd-extras-201605212201.tar.gz >> >> Checksum: >> >> SHA256 (opensmtpd-extras-201605212201.ta

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201605212201 available

On Sun, May 22, 2016 at 07:50:59AM +0200, Joerg Jung wrote: > > > Am 22.05.2016 um 02:12 schrieb Richard : > > > >> On Sat, 21 May 2016, j...@poolp.org wrote: > >> > >> A new opensmtpd-extras snapshot is available at: > >> > >>

Re: FW: smptd stops listing to external interfaces.

On Wed, May 25, 2016 at 06:21:40PM +, Peter Fraser wrote: > whoops I mistyped OpenBSD 5.9 which -extras version? > -Original Message- > From: Peter Fraser [mailto:p...@thinkage.ca] > Sent: Wednesday, May 25, 2016 2:16 PM > To: misc@opensmtpd.org > Subject: smptd stops listing to ext

Re: filter-spamassassin fails under heavy load (may 23 extras snapshot)

On Wed, May 25, 2016 at 04:28:59PM -0400, Andrew Ruscica wrote: > Not sure if the issue lies with the spamassassin daemon or the > opensmtp-filter. > > During a surge of incoming email, the following errors were logged. > OpenSMTP stopped relaying mail during this time: > > May 25 15:57:50 mxgw3

Re: filter-spamassassin fails under heavy load (may 23 extras snapshot)

> Am 26.05.2016 um 14:11 schrieb Andrew Ruscica : > >> On Wed, May 25, 2016 at 4:39 PM, Joerg Jung wrote: >> Can you provide smtpctl show stats and fstat -u _smtpd output? > > If the event happens again, I will provide output before restarting the > daemon. Here it

Re: smptd stops listing to external interfaces.

Have you guys both applied the 5.9 smtpd errata? There is a known FD leak bug with filters, which leads to dying smtpd once FD limit is reached, see #698. That is why I asked for fstat/stats output to verify if your current smtp.session have increased and hit the openfiles limit. Would be nice

Re: filter-spamassassin fails under heavy load (may 23 extras snapshot)

On Thu, May 26, 2016 at 01:51:20PM -0400, Andrew Ruscica wrote: > On Thu, May 26, 2016 at 10:50 AM, Joerg Jung wrote: > > > > > > > Am 26.05.2016 um 14:11 schrieb Andrew Ruscica : > > > > On Wed, May 25, 2016 at 4:39 PM, Joerg Jung wrote: > > > >&

Re: filter-spamassassin fails under heavy load (may 23 extras snapshot)

On Thu, May 26, 2016 at 08:14:12PM +0200, Joerg Jung wrote: > On Thu, May 26, 2016 at 01:51:20PM -0400, Andrew Ruscica wrote: > > On Thu, May 26, 2016 at 10:50 AM, Joerg Jung wrote: > > > Am 26.05.2016 um 14:11 schrieb Andrew Ruscica : > > > On Wed, May 25, 2016 at

Re: OpenSMTPD not start, only in debug mode

> Am 30.05.2016 um 04:40 schrieb Ultramedia Libertad : > > ehlo > > I have a problem opensmtpd was working properly, It was working before? So what have you changed? > but the restart to detect new tables and now I can not start it. > > My versions; > opensmtpd-extras: 5.7.1-2 > opensmtpd: 5.

Re: Tool stats

> On 02 Jun 2016, at 15:24, Edgar Pettijohn wrote: > > I saw this in my daily report. > > Running daily.local: > tool-stats: session failed line 10341 That means: it found a Session ID in the log which has been "Accepted” but not created with “New” before. This can happen due to log rotation

Re: dnsbl and ipv6

> Am 06.06.2016 um 20:39 schrieb Jason A. Donenfeld : > > Hi folks, > > Thanks for all the hard work and recent releases. dnsbl filter works > like a charm! > > One thing I encountered while playing with it is that emails from > gmail aren't filtered. So, do you really expect gmail on a blackl

Re: dkim simple canonicalization

> On 07 Jun 2016, at 09:43, Jason A. Donenfeld wrote: > > Hi Joerg, > > Reading from the RFC http://dkim.org/specs/rfc4871-dkimbase.html I saw this: > > > "Signers SHOULD choose canonicalization algorithms based on the types > of messages they process and their aversion to risk. For example,

Re: more detailed logging from filter-spamassassin

> Am 15.06.2016 um 19:55 schrieb Andrew Ruscica : > > This behaviour has been the same since I started using filter-spamassassin > which was before the May 23 snapshot. Currently on the June 6 snapshot of > opensmtpd & opensmtpd-extras. > > Using filter-spamassassin like this > > filter filt

Re: filter-spamassassin crashes smtpd on boot

> Am 30.06.2016 um 00:41 schrieb Simon McFarlane : > > Hi, > > I have a rather uninteresting setup consisting of Dovecot and OpenSMTPD with > few configuration tweaks on an OpenBSD system. The only filter I have is > filter-spamassassin. I'm running the latest -current snapshot and filter and

Re: filter-spamassassin crashes smtpd on boot

30 June 2016 at 14:42, Joerg Jung mailto:m...@umaxx.net>> > wrote: > > > > Am 30.06.2016 um 00:41 schrieb Simon McFarlane > <mailto:s...@desu.ne.jp>>: > > > > Hi, > > > > I have a rather uninteresting setup consisting of Dovecot and OpenSM

Re: [OpenSMTPD] opensmtpd-extra master snapshot opensmtpd-extras-201607061807 available

On Thu, Jul 07, 2016 at 01:51:35PM +1000, Dima Panov wrote: > 07.07.16 2:08, gilles chehade пишет: > > A new opensmtpd-extras snapshot is available at: > > > > > > http://www.opensmtpd.org/archives/opensmtpd-extras-201607061807.tar.gz > > > > Checksum: > > > > SHA256 (opensmtpd-extras

Re: Filter-API Error

There was an API bump. I’ve updated the port in -current, so next snapshot will contain a working package. However, most filters were removed as they are not considered ready and the API will be subject to further changes. For now, it is recommended to look for alternatives, e.g. filter-dkim-si

Re: Basic python filter activation / debugging

> Am 18.07.2016 um 02:15 schrieb Charleroi Vogt : > > Hello all. > > I am using opemsmtpd on an OpenBSD machine as an outbound mail relay for a > small private network. I understand the filter API is not stable or ready to > become integral to enterprise network infrastructure, etc. My use-

Re: filter-spamassassin gone?

> Am 26.07.2016 um 23:37 schrieb Simon McFarlane : > > Hi, > > I used to run filter-spamassassin on my MX, but after the filter API bump, > the filter no longer worked and I had to disable spam filtering (aside from > spamd). Now, it looks like opensmtpd-extras-spamassassin is missing from >

Re: table ownership/permissions issues

Am 17.08.2016 um 07:25 schrieb Jeremy Volkening : >>> >>> As an update to this - it works if I set "mail_auth" as the group >>> of the opensmtpd user (rather than a secondary group). Not sure if this is >>> a feature or a bug but I'll file something over on the github project page. >>> In a

Re: mlmmj with opensmtpd

> On 17 Aug 2016, at 12:47, Silvio Siefke wrote: > > On Tue, 16 Aug 2016 23:17:18 -0500 > Edgar Pettijohn wrote: > > >> # smtpd -dv > > # smtpd -dv > debug: init ssl-tree > info: loading pki information for fr-sb.silviosiefke.com > debug: init ca-tree > debug: init ssl-tree > info: loading

Re: Greylisting

On Mon, Sep 12, 2016 at 08:49:04PM +0200, Silvio Siefke wrote: > On Sat, 10 Sep 2016 23:06:54 +0200 > Mischa Peters wrote: > > > Have a look at spamd. > > https://www.openbsd.org/spamd/index.html > > > > Also runs on non-OpenBSD. > > Yes spamassassin is running with amavisd-new. That works wel

Re: what happened to filter_api_get_udata in the filter_api?

> On 2 Nov 2016, at 16:00, mabi wrote: > > Hi, > > I am trying to compile the filter-clamav from the latest OpenBSD-extras > master branch (from git) on OpenBSD 6.0 and noticed that the filter-clamav > does not compile because the function filter_api_get_udata() from the > filter_api has dis

Re: Relay for authenticated users

> On 3. May 2017, at 15:05, Frank Timmers wrote: > > Hi, > > I’m trying to allow relay for authenticated users, however “smtpd -n” gives a > syntax error on the last line (with the authenticated) keyword. As far as I > understand the documentation [1], this should be the correct syntax. I’ve

Re: opensmtpd cannot read passwd-file

> On 5. Nov 2017, at 09:03, Markus Cisler wrote: > > Hey there, > > I decided to redo my personal mail setup to use a passwd-file instead of > system users. I started with a simple config based on [1]. Dovecot works fine > with the passwd-file provided, opensmtpd crashes on start. > >

Re: tool-stats: strptime failed

> On 2. Apr 2018, at 21:57, Denis wrote: > > One minor problem with "Bonus: tool-stats script" from the tutorial. > > # cat /scripts/log-stat.sh > > #!/bin/sh > > /usr/bin/zcat /var/log/maillog.*.gz \ >| /usr/local/bin/tool-stats \ >| /usr/bin/mail -s "smtpd log report" root > > retur

Re: RBLs?

> On 20. Jun 2019, at 00:40, Thomas Smith wrote: > > Hi, > > I’ve been using a combination of OpenSMTPd and spamd on OpenBSD (currently at > 6.5) for some time and with success. However, there are still some > false-negatives and I’m looking at ways of reducing those. One way is by > making

Re: RBLs?

> Am 03.07.2019 um 10:26 schrieb Gilles Chehade : >> On Wed, Jul 03, 2019 at 08:22:59AM +, mabi wrote: >>> On Wednesday, July 3, 2019 9:39 AM, Giovanni Bechis >>> wrote: >>> >>> I think it could be possible to write a filter-spamassassin, that way smtpd >>> could reject based on SpamAssass

Re: table-passwd

> On 23. Sep 2019, at 18:58, Joerg Jung wrote: > > > >> On 18. Sep 2019, at 09:38, gil...@poolp.org wrote: >> >> September 17, 2019 11:41 PM, "Edgar Pettijohn" >> wrote: >> >>> On Sep 17, 2019 9:05 AM, Gilles Chehade wrote: &

Re: table-passwd

> On 23. Sep 2019, at 19:09, Edgar Pettijohn wrote: > > > On Sep 23, 2019 11:58 AM, Joerg Jung wrote: >> >> >> >>> On 18. Sep 2019, at 09:38, gil...@poolp.org wrote: >>> >>> September 17, 2019 11:41 PM, "Edgar Pettijohn&q

Re: table-passwd

> On 18. Sep 2019, at 09:38, gil...@poolp.org wrote: > > September 17, 2019 11:41 PM, "Edgar Pettijohn" > wrote: > >> On Sep 17, 2019 9:05 AM, Gilles Chehade wrote: >> >>> Hello, >>> >>> Is there anyone using table-passwd for _any_ other purposes than sharing >>> with Dovecot ? >>> >>> I

builtin filter regex question

Hi, I used some regex filters in the past which I'm trying to convert to the latest builtin filters. In particular, I stumbled over a HELO filter, which rejects non-FQDN HELO forcing SMTP protocol, aka: Sendmail FEATURE(block_bad_helo) or Postfix reject_non_fqdn_helo_hostname I had significant

Re: builtin filter regex question

On Thu, Oct 31, 2019 at 08:28:23AM +, gil...@poolp.org wrote: > October 24, 2019 8:35 PM, "Joerg Jung" wrote: > > > Hi, > > > > I used some regex filters in the past which I'm trying to convert to the > > latest builtin filters. In particu

Re: builtin filter regex question

On Mon, Nov 04, 2019 at 10:18:07PM +0100, Joerg Jung wrote: > On Thu, Oct 31, 2019 at 08:28:23AM +, gil...@poolp.org wrote: > > October 24, 2019 8:35 PM, "Joerg Jung" wrote: > > > > > I used some regex filters in the past which I'm trying to convert

Re: [patch] add a timeout to filter registration

On 2. May 2020, at 17:41, Edgar Pettijohn wrote:When playing with filters its easy to forget to registerstdout, etc...Here is a patch to add a timeout and give a little helpful info asopposed to just hanging in an unusable state.Index: lka_filter.c

Re: Failure to check FCrDNS with long DNS replies?

> On 21. Jul 2020, at 12:46, Tassilo Philipp > wrote: > > Hello, > > I have a strange problem, emails coming from a specific SMTP from SFR, namely > smtp26.services.sfr.fr get incorrectly filtered by a fcrdns check. The filter > line in question is: > > filter check_fcrdns phase connect ma

Re: Failure to check FCrDNS with long DNS replies?

> On 3. Aug 2020, at 12:23, Tassilo Philipp wrote: > > Thanks for the reply and your thoughts. > >> There should be nothing limit FCrDNS here, despite that >> these are a lot of records. >> >> But have you tried the dig lookup below from the actual mail >> server at the time (or shortly after

Re: Single PR or many smaller PRs?

> On 15. Oct 2020, at 16:32, Demi M. Obenour wrote: > > On 10/15/20 12:48 AM, Demi M. Obenour wrote: >> On 10/14/20 7:31 PM, gil...@poolp.org wrote: >>> October 14, 2020 11:31 PM, "Demi M. Obenour" wrote: That makes sense. I will make a separate PR that just has some automake fixes. >

Re: Failure to check FCrDNS with long DNS replies?

On Mon, Aug 03, 2020 at 02:05:20PM +0200, Tassilo Philipp wrote: > > Mhmm… but they returned different results, for dig vs OpenSMTPd filter > > lookup? > > Not sure, as I don't log the replies, but I don't think so. > > > > May cache TTL have expired and record re-fetched with your local test? >

Re: Failure to check FCrDNS with long DNS replies?

> On 21. Nov 2020, at 10:44, Tassilo Philipp > wrote: > >> FYI, I run into the same issue with a different provider: >> relay.yourmailgateway.de which also has a large number of A records. >> >> Trying to reproduce and digging deeper now, by adding debug logs etc. > > Interesting... thanks fo

Re: Failure to check FCrDNS with long DNS replies?

> On 18. Oct 2022, at 16:41, Tassilo Philipp > wrote: > >>> On 21. Nov 2020, at 10:44, Tassilo Philipp >>> wrote: >>> FYI, I run into the same issue with a different provider: relay.yourmailgateway.de which also has a large number of A records. Trying to reproduce and di

<    1   2