Pablo ¿Porque no usas smtpauth?Tendrias mas seguridad y menos problemas,spamdyke lo soporta
2008/6/14 Pablo Murillo <[EMAIL PROTECTED]>: > Sorry, but I'm not replacing any data > ONLY the IP address of my MX record > The rest of the "manual simulation" I sent is the real data I'm using > > > ----- Original Message ----- > From: "Sam Clippinger" <[EMAIL PROTECTED]> > To: "spamdyke users" <[email protected]> > Sent: Monday, July 14, 2008 11:21 AM > Subject: Re: [spamdyke-users] Strage happend (time to time) > > >>I understand why you're replacing sensitive data with "xxxxxxx". >> However, I can't fix this problem if I can't find a way to reproduce it >> myself. That's why I'm asking you to send the real unaltered data to me >> directly at [EMAIL PROTECTED] I won't share it with anyone and it might >> help me figure out what's happening. >> >> -- Sam Clippinger >> >> Pablo Murillo wrote: >>> I only using xxxxx to replace the IP of my MX record >>> The rest of X are what I'm really using to make the test >>> >>> my rcpthost has more than 1100 domains >>> I do a test with only 3 domains, and the trouble persist >>> >>> I did one more test, I changed the name of the rcpthost for one that not >>> exist, ant spamdyke report the error, so, it is using rcpthost, but not >>> returnig the error when the domain in the rcpt command isn't found in >>> rcpthost >>> >>> My be I'm not expresing very well >>> Sorry! >>> >>> >>> ----- Original Message ----- >>> From: "Sam Clippinger" <[EMAIL PROTECTED]> >>> To: "spamdyke users" <[email protected]> >>> Sent: Sunday, July 13, 2008 7:10 PM >>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>> >>> >>> >>>> When spamdyke's configuration includes both the "local-domains-file" and >>>> "access-file" options, it attempts to control relaying itself and it >>>> tells qmail to allow relaying. When you remove the "access-file" >>>> option, spamdyke can't control relaying and it allows qmail to do the >>>> work instead. That's why you're seeing the rejections from qmail when >>>> "access-file" is not present. >>>> >>>> It's possible that spamdyke is incorrectly finding the recipient's >>>> domain in your list of local domains. I understand that you don't want >>>> to post private information on the mailing list, so could you send me >>>> your real rcpthosts file and the name of the domain you're using in your >>>> tests directly to me? When you replace all of the real information with >>>> "xxxxxxx", I can't do very much testing here. >>>> >>>> -- Sam Clippinger >>>> >>>> Pablo Murillo wrote: >>>> >>>>> my tcp.smtp has only one line >>>>> :allow >>>>> >>>>> This servers (4 now) are only MX, it can receive mail from anywhere, >>>>> but >>>>> only allow mail form localdomins (rcpthost) >>>>> >>>>> I will make one more today and I will run the test, and then I will >>>>> send >>>>> the >>>>> results >>>>> >>>>> What look strange to me was that qmail rejects the mail for not being >>>>> in >>>>> rcpthost, not spamdyke >>>>> >>>>> Manual conversion form one server to another >>>>> --------------------------------- >>>>> Connected to xxx.xxx.xxx.xxx >>>>> Escape character is '^]'. >>>>> 220 [my mx domian] ESMTP >>>>> helo xxxx >>>>> 250 [my mx domian] >>>>> MAIL FROM: [EMAIL PROTECTED] >>>>> 250 ok >>>>> RCPT TO: [EMAIL PROTECTED] >>>>> 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1) >>>>> quit >>>>> 221 [my mx domian] >>>>> Connection closed by foreign host. >>>>> ---------------------------------- >>>>> >>>>> >>>>> ----- Original Message ----- >>>>> From: "Sam Clippinger" <[EMAIL PROTECTED]> >>>>> To: "spamdyke users" <[email protected]> >>>>> Sent: Saturday, July 12, 2008 4:52 PM >>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>> >>>>> >>>>> >>>>> >>>>>> I've been trying, but I can't reproduce this behavior on my test >>>>>> machines without whitelisting the incoming IP address. >>>>>> >>>>>> Could you send me your real /etc/tcp.smtp file and all of the log >>>>>> messages from spamdyke when you test it with the "access-file" option >>>>>> (so the mail is accepted)? Also, have you tried running the >>>>>> "config-test" feature to see if there are any problems with any of the >>>>>> configuration files? >>>>>> >>>>>> -- Sam Clippinger >>>>>> >>>>>> Pablo Murillo wrote: >>>>>> >>>>>> >>>>>>> Version: 3.1.8 >>>>>>> >>>>>>> Attached .conf & qmail/control >>>>>>> >>>>>>> >>>>>>> ----- Original Message ----- From: "Sam Clippinger" >>>>>>> <[EMAIL PROTECTED]> >>>>>>> To: "spamdyke users" <[email protected]> >>>>>>> Sent: Thursday, July 10, 2008 1:38 PM >>>>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>> What version of spamdyke are you using? Could you post your access >>>>>>>> file >>>>>>>> and your spamdyke configuration (or email them to me if you don't >>>>>>>> want >>>>>>>> them posted publicly?) >>>>>>>> >>>>>>>> -- Sam Clippinger >>>>>>>> >>>>>>>> Pablo Murillo wrote: >>>>>>>> >>>>>>>> >>>>>>>>> All the mails with valid rdns, dns, noot blackisted ip or domains >>>>>>>>> or >>>>>>>>> recipients, etc, etc, etc, go throw the server without any trouble >>>>>>>>> I did a "manual" smtp conversation sending a mail to a NON local >>>>>>>>> domain >>>>>>>>> (local-domains-file=[path]rcpthosts) with access-file enable, and >>>>>>>>> the mail >>>>>>>>> was accepted >>>>>>>>> Then, I put a "rem" on access-file, made the conversation again, >>>>>>>>> and >>>>>>>>> the >>>>>>>>> mail was rejected by qmail >>>>>>>>> I thing that spamdyke is doing something wrong with tcp.smtp >>>>>>>>> >>>>>>>>> Try with access-file on >>>>>>>>> >>>>>>>>> telenet [your_ip] 25 >>>>>>>>> helo xxxx >>>>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>>>> >>>>>>>>> Mails go OK >>>>>>>>> >>>>>>>>> Try without access-file on >>>>>>>>> >>>>>>>>> telenet [your_ip] 25 >>>>>>>>> helo xxxx >>>>>>>>> MAIL FROM: [EMAIL PROTECTED] >>>>>>>>> RCPT TO: [EMAIL PROTECTED] >>>>>>>>> >>>>>>>>> Mail is REJECTED >>>>>>>>> >>>>>>>>> ----- Original Message ----- From: "Sam Clippinger" >>>>>>>>> <[EMAIL PROTECTED]> >>>>>>>>> To: "spamdyke users" <[email protected]> >>>>>>>>> Sent: Thursday, July 10, 2008 12:44 PM >>>>>>>>> Subject: Re: [spamdyke-users] Strage happend (time to time) >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> An access file with just ":allow" is fine; it shouldn't cause any >>>>>>>>>> problems. >>>>>>>>>> >>>>>>>>>> Could you provide more details about the issues you were having? >>>>>>>>>> >>>>>>>>>> -- Sam Clippinger >>>>>>>>>> >>>>>>>>>> Pablo Murillo wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Hello >>>>>>>>>>> >>>>>>>>>>> My first time here >>>>>>>>>>> Sorry my english >>>>>>>>>>> >>>>>>>>>>> I solved that problem on my MX servers >>>>>>>>>>> Was a configuration problem >>>>>>>>>>> >>>>>>>>>>> I had in my access-file the following line: >>>>>>>>>>> >>>>>>>>>>> :allow >>>>>>>>>>> >>>>>>>>>>> Now, I don't use access-file and the rest of the filters work ok >>>>>>>>>>> I don't know how can I use that option, so I don't use it any >>>>>>>>>>> more >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> ----- Original Message ----- From: "N.Novozhilov" <[EMAIL >>>>>>>>>>> PROTECTED]> >>>>>>>>>>> To: <[email protected]> >>>>>>>>>>> Sent: Thursday, July 10, 2008 8:17 AM >>>>>>>>>>> Subject: [spamdyke-users] Strage happend (time to time) >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> Hi Sam! >>>>>>>>>>>> >>>>>>>>>>>> My users receive more and more spam last time. And I see >>>>>>>>>>>> (rarely) >>>>>>>>>>>> in >>>>>>>>>>>> headers and in >>>>>>>>>>>> logs the next picture: >>>>>>>>>>>> >>>>>>>>>>>> spamdyke[2918]: ALLOWED from: [EMAIL PROTECTED] to: >>>>>>>>>>>> [EMAIL PROTECTED] >>>>>>>>>>>> origin_ip: 190.232.71.105 origin_rdns: (unknown) auth: (unknown) >>>>>>>>>>>> >>>>>>>>>>>> Sender IP isn't in whitelist (whitelist_ip), target name absent >>>>>>>>>>>> in >>>>>>>>>>>> whitelist >>>>>>>>>>>> (whitelist_recipients), this user can't log by smtp and this IP >>>>>>>>>>>> isn't in >>>>>>>>>>>> tcp.rules. >>>>>>>>>>>> >>>>>>>>>>>> Why mails like this are allowed time to time? >>>>>>>>>>>> >>>>>>>>>>>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >>>>>>>>>>>> Regards >>>>>>>>>>>> Nicholas A. Novozhilov, NAN6-RIPE >>>>>>>>>>>> >>>>>>>>>>>> NTR Lab >>>>>>>>>>>> System administrator >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> spamdyke-users mailing list >>>>>>>>>>>> [email protected] >>>>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> spamdyke-users mailing list >>>>>>>>>>> [email protected] >>>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> spamdyke-users mailing list >>>>>>>>>> [email protected] >>>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> spamdyke-users mailing list >>>>>>>>> [email protected] >>>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> spamdyke-users mailing list >>>>>>>> [email protected] >>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> silent concurrency limit: 120. >>>>>>> >>>>>>> badmailfrom: >>>>>>> >>>>>>> bouncefrom: (Default.) Bounce user name is MAILER-DAEMON. >>>>>>> >>>>>>> bouncehost: Bounce host name is [my server] >>>>>>> >>>>>>> concurrencylocal: Local concurrency is 128. >>>>>>> >>>>>>> concurrencyremote: Remote concurrency is 128. >>>>>>> >>>>>>> databytes: SMTP DATA limit is 15728640 bytes. >>>>>>> >>>>>>> defaultdomain: Default domain name is [my server]. >>>>>>> >>>>>>> defaulthost: (Default.) Default host name is [my server] >>>>>>> >>>>>>> doublebouncehost: (Default.) 2B recipient host: [my server] >>>>>>> >>>>>>> doublebounceto: (Default.) 2B recipient user: postmaster. >>>>>>> >>>>>>> envnoathost: (Default.) Presumed domain name is [my server] >>>>>>> >>>>>>> helohost: SMTP client HELO host name is [my server] >>>>>>> >>>>>>> idhost: Message-ID host name is [my server] >>>>>>> >>>>>>> localiphost: (Default.) Local IP address becomes [my server] >>>>>>> >>>>>>> locals: >>>>>>> Messages for mx4.serversur.net are delivered locally. >>>>>>> >>>>>>> me: My name is [my server] >>>>>>> >>>>>>> percenthack: (Default.) The percent hack is not allowed. >>>>>>> >>>>>>> plusdomain: Plus domain name is [my server]. >>>>>>> >>>>>>> qmqpservers: (Default.) No QMQP servers. >>>>>>> >>>>>>> queuelifetime: Message lifetime in the queue is 14400 seconds. >>>>>>> >>>>>>> rcpthosts: >>>>>>> SMTP clients may send messages to recipients at ***** >>>>>>> [all may locals domains, around 1100 domains] >>>>>>> >>>>>>> morercpthosts: (Default.) No effect. >>>>>>> >>>>>>> morercpthosts.cdb: (Default.) No effect. >>>>>>> >>>>>>> smtpgreeting: SMTP greeting: 220 [server_name] >>>>>>> >>>>>>> smtproutes: >>>>>>> SMTP route: [domainio local]:[ip local] >>>>>>> >>>>>>> timeoutconnect: (Default.) SMTP client connection timeout is 60 >>>>>>> seconds. >>>>>>> >>>>>>> timeoutremote: SMTP client data timeout is 30 seconds. >>>>>>> >>>>>>> timeoutsmtpd: SMTP server data timeout is 30 seconds. >>>>>>> >>>>>>> virtualdomains: (Default.) No virtual domains. >>>>>>> >>>>>>> defaultdelivery: I have no idea what this file does. >>>>>>> >>>>>>> concurrencyincoming: I have no idea what this file does. >>>>>>> >>>>>>> ------------------------------------------------------------------------ >>>>>>> >>>>>>> _______________________________________________ >>>>>>> spamdyke-users mailing list >>>>>>> [email protected] >>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>>> >>>>>>> >>>>>>> >>>>>> _______________________________________________ >>>>>> spamdyke-users mailing list >>>>>> [email protected] >>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>>> >>>>>> >>>>>> >>>>> _______________________________________________ >>>>> spamdyke-users mailing list >>>>> [email protected] >>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>> >>>>> >>>> _______________________________________________ >>>> spamdyke-users mailing list >>>> [email protected] >>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>> >>>> >>> >>> _______________________________________________ >>> spamdyke-users mailing list >>> [email protected] >>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>> >> _______________________________________________ >> spamdyke-users mailing list >> [email protected] >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
