Sorry, but I'm not replacing any data ONLY the IP address of my MX record The rest of the "manual simulation" I sent is the real data I'm using
----- Original Message ----- From: "Sam Clippinger" <[EMAIL PROTECTED]> To: "spamdyke users" <[email protected]> Sent: Monday, July 14, 2008 11:21 AM Subject: Re: [spamdyke-users] Strage happend (time to time) >I understand why you're replacing sensitive data with "xxxxxxx". > However, I can't fix this problem if I can't find a way to reproduce it > myself. That's why I'm asking you to send the real unaltered data to me > directly at [EMAIL PROTECTED] I won't share it with anyone and it might > help me figure out what's happening. > > -- Sam Clippinger > > Pablo Murillo wrote: >> I only using xxxxx to replace the IP of my MX record >> The rest of X are what I'm really using to make the test >> >> my rcpthost has more than 1100 domains >> I do a test with only 3 domains, and the trouble persist >> >> I did one more test, I changed the name of the rcpthost for one that not >> exist, ant spamdyke report the error, so, it is using rcpthost, but not >> returnig the error when the domain in the rcpt command isn't found in >> rcpthost >> >> My be I'm not expresing very well >> Sorry! >> >> >> ----- Original Message ----- >> From: "Sam Clippinger" <[EMAIL PROTECTED]> >> To: "spamdyke users" <[email protected]> >> Sent: Sunday, July 13, 2008 7:10 PM >> Subject: Re: [spamdyke-users] Strage happend (time to time) >> >> >> >>> When spamdyke's configuration includes both the "local-domains-file" and >>> "access-file" options, it attempts to control relaying itself and it >>> tells qmail to allow relaying. When you remove the "access-file" >>> option, spamdyke can't control relaying and it allows qmail to do the >>> work instead. That's why you're seeing the rejections from qmail when >>> "access-file" is not present. >>> >>> It's possible that spamdyke is incorrectly finding the recipient's >>> domain in your list of local domains. I understand that you don't want >>> to post private information on the mailing list, so could you send me >>> your real rcpthosts file and the name of the domain you're using in your >>> tests directly to me? When you replace all of the real information with >>> "xxxxxxx", I can't do very much testing here. >>> >>> -- Sam Clippinger >>> >>> Pablo Murillo wrote: >>> >>>> my tcp.smtp has only one line >>>> :allow >>>> >>>> This servers (4 now) are only MX, it can receive mail from anywhere, >>>> but >>>> only allow mail form localdomins (rcpthost) >>>> >>>> I will make one more today and I will run the test, and then I will >>>> send >>>> the >>>> results >>>> >>>> What look strange to me was that qmail rejects the mail for not being >>>> in >>>> rcpthost, not spamdyke >>>> >>>> Manual conversion form one server to another >>>> --------------------------------- >>>> Connected to xxx.xxx.xxx.xxx >>>> Escape character is '^]'. >>>> 220 [my mx domian] ESMTP >>>> helo xxxx >>>> 250 [my mx domian] >>>> MAIL FROM: [EMAIL PROTECTED] >>>> 250 ok >>>> RCPT TO: [EMAIL PROTECTED] >>>> 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1) >>>> quit >>>> 221 [my mx domian] >>>> Connection closed by foreign host. >>>> ---------------------------------- >>>> >>>> >>>> ----- Original Message ----- >>>> From: "Sam Clippinger" <[EMAIL PROTECTED]> >>>> To: "spamdyke users" <[email protected]> >>>> Sent: Saturday, July 12, 2008 4:52 PM >>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>> >>>> >>>> >>>> >>>>> I've been trying, but I can't reproduce this behavior on my test >>>>> machines without whitelisting the incoming IP address. >>>>> >>>>> Could you send me your real /etc/tcp.smtp file and all of the log >>>>> messages from spamdyke when you test it with the "access-file" option >>>>> (so the mail is accepted)? Also, have you tried running the >>>>> "config-test" feature to see if there are any problems with any of the >>>>> configuration files? >>>>> >>>>> -- Sam Clippinger >>>>> >>>>> Pablo Murillo wrote: >>>>> >>>>> >>>>>> Version: 3.1.8 >>>>>> >>>>>> Attached .conf & qmail/control >>>>>> >>>>>> >>>>>> ----- Original Message ----- From: "Sam Clippinger" >>>>>> <[EMAIL PROTECTED]> >>>>>> To: "spamdyke users" <[email protected]> >>>>>> Sent: Thursday, July 10, 2008 1:38 PM >>>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> What version of spamdyke are you using? Could you post your access >>>>>>> file >>>>>>> and your spamdyke configuration (or email them to me if you don't >>>>>>> want >>>>>>> them posted publicly?) >>>>>>> >>>>>>> -- Sam Clippinger >>>>>>> >>>>>>> Pablo Murillo wrote: >>>>>>> >>>>>>> >>>>>>>> All the mails with valid rdns, dns, noot blackisted ip or domains >>>>>>>> or >>>>>>>> recipients, etc, etc, etc, go throw the server without any trouble >>>>>>>> I did a "manual" smtp conversation sending a mail to a NON local >>>>>>>> domain >>>>>>>> (local-domains-file=[path]rcpthosts) with access-file enable, and >>>>>>>> the mail >>>>>>>> was accepted >>>>>>>> Then, I put a "rem" on access-file, made the conversation again, >>>>>>>> and >>>>>>>> the >>>>>>>> mail was rejected by qmail >>>>>>>> I thing that spamdyke is doing something wrong with tcp.smtp >>>>>>>> >>>>>>>> Try with access-file on >>>>>>>> >>>>>>>> telenet [your_ip] 25 >>>>>>>> helo xxxx >>>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>>> >>>>>>>> Mails go OK >>>>>>>> >>>>>>>> Try without access-file on >>>>>>>> >>>>>>>> telenet [your_ip] 25 >>>>>>>> helo xxxx >>>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>>> >>>>>>>> Mail is REJECTED >>>>>>>> >>>>>>>> ----- Original Message ----- From: "Sam Clippinger" >>>>>>>> <[EMAIL PROTECTED]> >>>>>>>> To: "spamdyke users" <[email protected]> >>>>>>>> Sent: Thursday, July 10, 2008 12:44 PM >>>>>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> An access file with just ":allow" is fine; it shouldn't cause any >>>>>>>>> problems. >>>>>>>>> >>>>>>>>> Could you provide more details about the issues you were having? >>>>>>>>> >>>>>>>>> -- Sam Clippinger >>>>>>>>> >>>>>>>>> Pablo Murillo wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> Hello >>>>>>>>>> >>>>>>>>>> My first time here >>>>>>>>>> Sorry my english >>>>>>>>>> >>>>>>>>>> I solved that problem on my MX servers >>>>>>>>>> Was a configuration problem >>>>>>>>>> >>>>>>>>>> I had in my access-file the following line: >>>>>>>>>> >>>>>>>>>> :allow >>>>>>>>>> >>>>>>>>>> Now, I don't use access-file and the rest of the filters work ok >>>>>>>>>> I don't know how can I use that option, so I don't use it any >>>>>>>>>> more >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> ----- Original Message ----- From: "N.Novozhilov" <[EMAIL PROTECTED]> >>>>>>>>>> To: <[email protected]> >>>>>>>>>> Sent: Thursday, July 10, 2008 8:17 AM >>>>>>>>>> Subject: [spamdyke-users] Strage happend (time to time) >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Hi Sam! >>>>>>>>>>> >>>>>>>>>>> My users receive more and more spam last time. And I see >>>>>>>>>>> (rarely) >>>>>>>>>>> in >>>>>>>>>>> headers and in >>>>>>>>>>> logs the next picture: >>>>>>>>>>> >>>>>>>>>>> spamdyke[2918]: ALLOWED from: [EMAIL PROTECTED] to: >>>>>>>>>>> [EMAIL PROTECTED] >>>>>>>>>>> origin_ip: 190.232.71.105 origin_rdns: (unknown) auth: (unknown) >>>>>>>>>>> >>>>>>>>>>> Sender IP isn't in whitelist (whitelist_ip), target name absent >>>>>>>>>>> in >>>>>>>>>>> whitelist >>>>>>>>>>> (whitelist_recipients), this user can't log by smtp and this IP >>>>>>>>>>> isn't in >>>>>>>>>>> tcp.rules. >>>>>>>>>>> >>>>>>>>>>> Why mails like this are allowed time to time? >>>>>>>>>>> >>>>>>>>>>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >>>>>>>>>>> Regards >>>>>>>>>>> Nicholas A. Novozhilov, NAN6-RIPE >>>>>>>>>>> >>>>>>>>>>> NTR Lab >>>>>>>>>>> System administrator >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> spamdyke-users mailing list >>>>>>>>>>> [email protected] >>>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> spamdyke-users mailing list >>>>>>>>>> [email protected] >>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> spamdyke-users mailing list >>>>>>>>> [email protected] >>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> spamdyke-users mailing list >>>>>>>> [email protected] >>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> _______________________________________________ >>>>>>> spamdyke-users mailing list >>>>>>> [email protected] >>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> silent concurrency limit: 120. >>>>>> >>>>>> badmailfrom: >>>>>> >>>>>> bouncefrom: (Default.) Bounce user name is MAILER-DAEMON. >>>>>> >>>>>> bouncehost: Bounce host name is [my server] >>>>>> >>>>>> concurrencylocal: Local concurrency is 128. >>>>>> >>>>>> concurrencyremote: Remote concurrency is 128. >>>>>> >>>>>> databytes: SMTP DATA limit is 15728640 bytes. >>>>>> >>>>>> defaultdomain: Default domain name is [my server]. >>>>>> >>>>>> defaulthost: (Default.) Default host name is [my server] >>>>>> >>>>>> doublebouncehost: (Default.) 2B recipient host: [my server] >>>>>> >>>>>> doublebounceto: (Default.) 2B recipient user: postmaster. >>>>>> >>>>>> envnoathost: (Default.) Presumed domain name is [my server] >>>>>> >>>>>> helohost: SMTP client HELO host name is [my server] >>>>>> >>>>>> idhost: Message-ID host name is [my server] >>>>>> >>>>>> localiphost: (Default.) Local IP address becomes [my server] >>>>>> >>>>>> locals: >>>>>> Messages for mx4.serversur.net are delivered locally. >>>>>> >>>>>> me: My name is [my server] >>>>>> >>>>>> percenthack: (Default.) The percent hack is not allowed. >>>>>> >>>>>> plusdomain: Plus domain name is [my server]. >>>>>> >>>>>> qmqpservers: (Default.) No QMQP servers. >>>>>> >>>>>> queuelifetime: Message lifetime in the queue is 14400 seconds. >>>>>> >>>>>> rcpthosts: >>>>>> SMTP clients may send messages to recipients at ***** >>>>>> [all may locals domains, around 1100 domains] >>>>>> >>>>>> morercpthosts: (Default.) No effect. >>>>>> >>>>>> morercpthosts.cdb: (Default.) No effect. >>>>>> >>>>>> smtpgreeting: SMTP greeting: 220 [server_name] >>>>>> >>>>>> smtproutes: >>>>>> SMTP route: [domainio local]:[ip local] >>>>>> >>>>>> timeoutconnect: (Default.) SMTP client connection timeout is 60 >>>>>> seconds. >>>>>> >>>>>> timeoutremote: SMTP client data timeout is 30 seconds. >>>>>> >>>>>> timeoutsmtpd: SMTP server data timeout is 30 seconds. >>>>>> >>>>>> virtualdomains: (Default.) No virtual domains. >>>>>> >>>>>> defaultdelivery: I have no idea what this file does. >>>>>> >>>>>> concurrencyincoming: I have no idea what this file does. >>>>>> >>>>>> ------------------------------------------------------------------------ >>>>>> >>>>>> _______________________________________________ >>>>>> spamdyke-users mailing list >>>>>> [email protected] >>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>> >>>>>> >>>>>> >>>>> _______________________________________________ >>>>> spamdyke-users mailing list >>>>> [email protected] >>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>> >>>>> >>>>> >>>> _______________________________________________ >>>> spamdyke-users mailing list >>>> [email protected] >>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>> >>>> >>> _______________________________________________ >>> spamdyke-users mailing list >>> [email protected] >>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>> >>> >> >> _______________________________________________ >> spamdyke-users mailing list >> [email protected] >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
