I understand why you're replacing sensitive data with "xxxxxxx". However, I can't fix this problem if I can't find a way to reproduce it myself. That's why I'm asking you to send the real unaltered data to me directly at [EMAIL PROTECTED] I won't share it with anyone and it might help me figure out what's happening.
-- Sam Clippinger Pablo Murillo wrote: > I only using xxxxx to replace the IP of my MX record > The rest of X are what I'm really using to make the test > > my rcpthost has more than 1100 domains > I do a test with only 3 domains, and the trouble persist > > I did one more test, I changed the name of the rcpthost for one that not > exist, ant spamdyke report the error, so, it is using rcpthost, but not > returnig the error when the domain in the rcpt command isn't found in > rcpthost > > My be I'm not expresing very well > Sorry! > > > ----- Original Message ----- > From: "Sam Clippinger" <[EMAIL PROTECTED]> > To: "spamdyke users" <[email protected]> > Sent: Sunday, July 13, 2008 7:10 PM > Subject: Re: [spamdyke-users] Strage happend (time to time) > > > >> When spamdyke's configuration includes both the "local-domains-file" and >> "access-file" options, it attempts to control relaying itself and it >> tells qmail to allow relaying. When you remove the "access-file" >> option, spamdyke can't control relaying and it allows qmail to do the >> work instead. That's why you're seeing the rejections from qmail when >> "access-file" is not present. >> >> It's possible that spamdyke is incorrectly finding the recipient's >> domain in your list of local domains. I understand that you don't want >> to post private information on the mailing list, so could you send me >> your real rcpthosts file and the name of the domain you're using in your >> tests directly to me? When you replace all of the real information with >> "xxxxxxx", I can't do very much testing here. >> >> -- Sam Clippinger >> >> Pablo Murillo wrote: >> >>> my tcp.smtp has only one line >>> :allow >>> >>> This servers (4 now) are only MX, it can receive mail from anywhere, but >>> only allow mail form localdomins (rcpthost) >>> >>> I will make one more today and I will run the test, and then I will send >>> the >>> results >>> >>> What look strange to me was that qmail rejects the mail for not being in >>> rcpthost, not spamdyke >>> >>> Manual conversion form one server to another >>> --------------------------------- >>> Connected to xxx.xxx.xxx.xxx >>> Escape character is '^]'. >>> 220 [my mx domian] ESMTP >>> helo xxxx >>> 250 [my mx domian] >>> MAIL FROM: [EMAIL PROTECTED] >>> 250 ok >>> RCPT TO: [EMAIL PROTECTED] >>> 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1) >>> quit >>> 221 [my mx domian] >>> Connection closed by foreign host. >>> ---------------------------------- >>> >>> >>> ----- Original Message ----- >>> From: "Sam Clippinger" <[EMAIL PROTECTED]> >>> To: "spamdyke users" <[email protected]> >>> Sent: Saturday, July 12, 2008 4:52 PM >>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>> >>> >>> >>> >>>> I've been trying, but I can't reproduce this behavior on my test >>>> machines without whitelisting the incoming IP address. >>>> >>>> Could you send me your real /etc/tcp.smtp file and all of the log >>>> messages from spamdyke when you test it with the "access-file" option >>>> (so the mail is accepted)? Also, have you tried running the >>>> "config-test" feature to see if there are any problems with any of the >>>> configuration files? >>>> >>>> -- Sam Clippinger >>>> >>>> Pablo Murillo wrote: >>>> >>>> >>>>> Version: 3.1.8 >>>>> >>>>> Attached .conf & qmail/control >>>>> >>>>> >>>>> ----- Original Message ----- From: "Sam Clippinger" <[EMAIL PROTECTED]> >>>>> To: "spamdyke users" <[email protected]> >>>>> Sent: Thursday, July 10, 2008 1:38 PM >>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>> >>>>> >>>>> >>>>> >>>>>> What version of spamdyke are you using? Could you post your access >>>>>> file >>>>>> and your spamdyke configuration (or email them to me if you don't want >>>>>> them posted publicly?) >>>>>> >>>>>> -- Sam Clippinger >>>>>> >>>>>> Pablo Murillo wrote: >>>>>> >>>>>> >>>>>>> All the mails with valid rdns, dns, noot blackisted ip or domains or >>>>>>> recipients, etc, etc, etc, go throw the server without any trouble >>>>>>> I did a "manual" smtp conversation sending a mail to a NON local >>>>>>> domain >>>>>>> (local-domains-file=[path]rcpthosts) with access-file enable, and >>>>>>> the mail >>>>>>> was accepted >>>>>>> Then, I put a "rem" on access-file, made the conversation again, and >>>>>>> the >>>>>>> mail was rejected by qmail >>>>>>> I thing that spamdyke is doing something wrong with tcp.smtp >>>>>>> >>>>>>> Try with access-file on >>>>>>> >>>>>>> telenet [your_ip] 25 >>>>>>> helo xxxx >>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>> >>>>>>> Mails go OK >>>>>>> >>>>>>> Try without access-file on >>>>>>> >>>>>>> telenet [your_ip] 25 >>>>>>> helo xxxx >>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>> >>>>>>> Mail is REJECTED >>>>>>> >>>>>>> ----- Original Message ----- From: "Sam Clippinger" >>>>>>> <[EMAIL PROTECTED]> >>>>>>> To: "spamdyke users" <[email protected]> >>>>>>> Sent: Thursday, July 10, 2008 12:44 PM >>>>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>> An access file with just ":allow" is fine; it shouldn't cause any >>>>>>>> problems. >>>>>>>> >>>>>>>> Could you provide more details about the issues you were having? >>>>>>>> >>>>>>>> -- Sam Clippinger >>>>>>>> >>>>>>>> Pablo Murillo wrote: >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> Hello >>>>>>>>> >>>>>>>>> My first time here >>>>>>>>> Sorry my english >>>>>>>>> >>>>>>>>> I solved that problem on my MX servers >>>>>>>>> Was a configuration problem >>>>>>>>> >>>>>>>>> I had in my access-file the following line: >>>>>>>>> >>>>>>>>> :allow >>>>>>>>> >>>>>>>>> Now, I don't use access-file and the rest of the filters work ok >>>>>>>>> I don't know how can I use that option, so I don't use it any more >>>>>>>>> >>>>>>>>> >>>>>>>>> ----- Original Message ----- From: "N.Novozhilov" <[EMAIL PROTECTED]> >>>>>>>>> To: <[email protected]> >>>>>>>>> Sent: Thursday, July 10, 2008 8:17 AM >>>>>>>>> Subject: [spamdyke-users] Strage happend (time to time) >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> Hi Sam! >>>>>>>>>> >>>>>>>>>> My users receive more and more spam last time. And I see (rarely) >>>>>>>>>> in >>>>>>>>>> headers and in >>>>>>>>>> logs the next picture: >>>>>>>>>> >>>>>>>>>> spamdyke[2918]: ALLOWED from: [EMAIL PROTECTED] to: >>>>>>>>>> [EMAIL PROTECTED] >>>>>>>>>> origin_ip: 190.232.71.105 origin_rdns: (unknown) auth: (unknown) >>>>>>>>>> >>>>>>>>>> Sender IP isn't in whitelist (whitelist_ip), target name absent in >>>>>>>>>> whitelist >>>>>>>>>> (whitelist_recipients), this user can't log by smtp and this IP >>>>>>>>>> isn't in >>>>>>>>>> tcp.rules. >>>>>>>>>> >>>>>>>>>> Why mails like this are allowed time to time? >>>>>>>>>> >>>>>>>>>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >>>>>>>>>> Regards >>>>>>>>>> Nicholas A. Novozhilov, NAN6-RIPE >>>>>>>>>> >>>>>>>>>> NTR Lab >>>>>>>>>> System administrator >>>>>>>>>> _______________________________________________ >>>>>>>>>> spamdyke-users mailing list >>>>>>>>>> [email protected] >>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> spamdyke-users mailing list >>>>>>>>> [email protected] >>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> spamdyke-users mailing list >>>>>>>> [email protected] >>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> _______________________________________________ >>>>>>> spamdyke-users mailing list >>>>>>> [email protected] >>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>> >>>>>>> >>>>>>> >>>>>> _______________________________________________ >>>>>> spamdyke-users mailing list >>>>>> [email protected] >>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>> >>>>>> >>>>>> >>>>>> >>>>> silent concurrency limit: 120. >>>>> >>>>> badmailfrom: >>>>> >>>>> bouncefrom: (Default.) Bounce user name is MAILER-DAEMON. >>>>> >>>>> bouncehost: Bounce host name is [my server] >>>>> >>>>> concurrencylocal: Local concurrency is 128. >>>>> >>>>> concurrencyremote: Remote concurrency is 128. >>>>> >>>>> databytes: SMTP DATA limit is 15728640 bytes. >>>>> >>>>> defaultdomain: Default domain name is [my server]. >>>>> >>>>> defaulthost: (Default.) Default host name is [my server] >>>>> >>>>> doublebouncehost: (Default.) 2B recipient host: [my server] >>>>> >>>>> doublebounceto: (Default.) 2B recipient user: postmaster. >>>>> >>>>> envnoathost: (Default.) Presumed domain name is [my server] >>>>> >>>>> helohost: SMTP client HELO host name is [my server] >>>>> >>>>> idhost: Message-ID host name is [my server] >>>>> >>>>> localiphost: (Default.) Local IP address becomes [my server] >>>>> >>>>> locals: >>>>> Messages for mx4.serversur.net are delivered locally. >>>>> >>>>> me: My name is [my server] >>>>> >>>>> percenthack: (Default.) The percent hack is not allowed. >>>>> >>>>> plusdomain: Plus domain name is [my server]. >>>>> >>>>> qmqpservers: (Default.) No QMQP servers. >>>>> >>>>> queuelifetime: Message lifetime in the queue is 14400 seconds. >>>>> >>>>> rcpthosts: >>>>> SMTP clients may send messages to recipients at ***** >>>>> [all may locals domains, around 1100 domains] >>>>> >>>>> morercpthosts: (Default.) No effect. >>>>> >>>>> morercpthosts.cdb: (Default.) No effect. >>>>> >>>>> smtpgreeting: SMTP greeting: 220 [server_name] >>>>> >>>>> smtproutes: >>>>> SMTP route: [domainio local]:[ip local] >>>>> >>>>> timeoutconnect: (Default.) SMTP client connection timeout is 60 >>>>> seconds. >>>>> >>>>> timeoutremote: SMTP client data timeout is 30 seconds. >>>>> >>>>> timeoutsmtpd: SMTP server data timeout is 30 seconds. >>>>> >>>>> virtualdomains: (Default.) No virtual domains. >>>>> >>>>> defaultdelivery: I have no idea what this file does. >>>>> >>>>> concurrencyincoming: I have no idea what this file does. >>>>> >>>>> ------------------------------------------------------------------------ >>>>> >>>>> _______________________________________________ >>>>> spamdyke-users mailing list >>>>> [email protected] >>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>> >>>>> >>>>> >>>> _______________________________________________ >>>> spamdyke-users mailing list >>>> [email protected] >>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>> >>>> >>>> >>> _______________________________________________ >>> spamdyke-users mailing list >>> [email protected] >>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>> >>> >> _______________________________________________ >> spamdyke-users mailing list >> [email protected] >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> >> > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
