Re: [vchkpw] vpopmail + whitelist with Spamcontrol

2004-06-30 Thread Erwin Hoffmann
Salut,

At 16:55 30.06.04 +0200, you wrote:
>Erwin Hoffmann a ecrit :
>
>[...]
>>>But some people say it's possible, so ?
>> 
>> 
>> conf-spamcontrol:
>> 
>> locals=no
>> 
>> ./spamcontrol.sh -u 2212; ./spamcontrol.sh; make; make setup
>
>I have this problem yet, local users can't send email
>to untrusted user :
>
>freezer:# telnet localhost 25
>Escape character is '^]'.
>220 Spam makes the baby Jesus cry ESMTP
>mail from:<[EMAIL PROTECTED]>
>250 ok
>rcpt to:<[EMAIL PROTECTED]>
>453 sorry, mailbox currently unavailable (#5.2.1)
>rcpt to:<[EMAIL PROTECTED]>
>250 ok
>
>Localhost should be trust with tcpserver :

Not necessarily. If I telnet on my system to localhost, the TCPREMOTEIP (on
which RELAYCLIENT is based) is the defined IP address, not the Loopback
address.


>
>freezer:/# cat /etc/tcp.smtp
>127.:allow,RELAYCLIENT=""
>192.168.10.:allow,RELAYCLIENT=""
>:allow,QMAILQUEUE="/usr/local/bin/qmail-scanner-queue.pl",MFDNSCHECK="",BAD
MIMETYPE=""

You will see in the qmail-smtpd log what's going on.

regards.
--eh.


Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/
Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24


Re: [vchkpw] vpopmail + whitelist with Spamcontrol

2004-06-30 Thread David Du SERRE-TELMON
Erwin Hoffmann a ecrit :
[...]
But some people say it's possible, so ?

conf-spamcontrol:
locals=no
./spamcontrol.sh -u 2212; ./spamcontrol.sh; make; make setup
I have this problem yet, local users can't send email
to untrusted user :
freezer:# telnet localhost 25
Escape character is '^]'.
220 Spam makes the baby Jesus cry ESMTP
mail from:<[EMAIL PROTECTED]>
250 ok
rcpt to:<[EMAIL PROTECTED]>
453 sorry, mailbox currently unavailable (#5.2.1)
rcpt to:<[EMAIL PROTECTED]>
250 ok
Localhost should be trust with tcpserver :
freezer:/# cat /etc/tcp.smtp
127.:allow,RELAYCLIENT=""
192.168.10.:allow,RELAYCLIENT=""
:allow,QMAILQUEUE="/usr/local/bin/qmail-scanner-queue.pl",MFDNSCHECK="",BADMIMETYPE=""
If I remove /var/qmail/control/recipient, I can send email from 
localhost (but whitelist is unavailable of course)

Thank your for your answer Erwin.


Re: [vchkpw] vpopmail + whitelist with Spamcontrol

2004-06-30 Thread Erwin Hoffmann
Hi,

At 13:15 30.06.04 +0200, you wrote:
>Hi,
>
>I'd like to do whitelist receipients for my domains with Spamcontrol.
>http://www.fehcom.de/qmail/spamcontrol/README_spamcontrol.html
>
>In the documentation, it's write we can't use RECIPIENT features with 
>virtuals domains :
>
>The RECIPIENTS extension makes qmail-smtpd aware of acceptable local 
>RECIPIENTS. The RECIPIENTS are kept in 'fastforward' compatible cdbs for 
>a case-insensitve quick lookup during the SMTP session. The lookup is 
>done for RECIPIENTS whose domain part match an entry in control/locals 
>and is not applied for virtual domains.

This is true, unless you've modified (conf-spamcontrol) to allow
SPAMCONTROL to do whitelisting on all addresses as per rcpthosts.

>
>But some people say it's possible, so ?

conf-spamcontrol:

locals=no

./spamcontrol.sh -u 2212; ./spamcontrol.sh; make; make setup

>When I add a domain in control/locals, mails a not delivred :
>Unable_to_chdir_to_maildir._(#4.2.1)

vpopmail is responsible for virtualdomain deliveries, whereas qmail is for
locals.

>A lots of spam in send to unexistent address :((, and my server have to 
>manage a lots of bounces. What is the best way in order to avoid this ?

The is no alternative to whitelisting. Whether you use the RECIPIENTS
extension (with SPAMCONTROL) or qmail-goodrcptto or whatever.

However, it only makes sense if YOU know all recipient addresses.

The next release of SPAMCONTROL / RECIPIENTS extension will allow
domain-wildlisting - a smart method to control incoming "rcpt to:" addresses.

regards.
--eh.

PS: I should put the next release of RECPIENTS extension next week on my
web page. It will coexist with SPAMCONTROL 2.2.

Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/
Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24