I can see why spamdyke is accepting messages to your subdomains -- you've
whitelisted the recipients. In the full log you sent, I see this line:
FILTER_RECIPIENT_WHITELIST recipient: [email protected] file:
/var/qmail/control/whitelist.local(84)
If you're just trying to stop deliveries to your subdomains, removing the
whitelist entry will accomplish that goal. If you also want to fix chkuser,
there's more work to be done.
I don't use chkuser myself, so I'm not familiar with how to configure it. I've
glanced at the patch file (version 2.0.9) and your configuration file; nothing
jumps out as obviously incorrect. My first idea is the RELAYCLIENT environment
variable may the problem. spamdyke sets that variable so that it may control
relaying instead of letting qmail-smtpd handle it. I suspected this may
prevent chkuser from working, but your configuration seems to eliminate that
possibility. Were I you, I think my next step would be to remove spamdyke from
the "run" file and see if chkuser starts working again. If it does, we can
keep trying to figure out why spamdyke is interfering with it.
-- Sam Clippinger
Youri V. Kravatsky wrote:
> Hello Eric,
>
> Saturday, September 5, 2009, 2:39:30 AM, you wrote:
>
>
>>>> What subdomains are you seeing besides @www. ?
>>>>
>>> Subdomains of our domains. Mail that goes to domains that are not
>>> included to rcpthosts file is rejected. But mail to www.mydomain.com or
>>> mail.mydomain.com are accepted to deliver (to no avail, of course).
>>>
>
>
>> I think this is part of your problem:
>> shu...@edwin:~$ host xyz.ja-maica.ru
>> xyz.ja-maica.ru is an alias for www.ja-maica.ru.
>> www.ja-maica.ru is an alias for www.dsite.ru.
>> www.dsite.ru is an alias for dsite.ru.
>> dsite.ru has address 89.108.80.21
>> dsite.ru mail is handled by 10 dsite.ru.
>>
>
>
>> Any subdomain will find its way to your server.
>> Is there any reason for the wildcard DNS record(s)?
>>
> Yes, it seems quite reasonable for www-hoster (I know, I know, it's not
> good practice to have www-carrier/database provider and mail server at one
> hardware, but we not always can change reality as we want). So in the case
> of any mistype/error users will access through HTTP any domain that is
> hosted succesfully.
> Really, the question is - why chkuser/qmail/spamdyke is accepting mail
> for subdomains, if they are not listed directly in rcpthosts? And how to
> stop it?
> Right now in rcpthosts is the string
>
> ja-maica.ru
>
> without "." and/or "@". Probably, I'll play with it at night, when the risk
> to lose some mail is minimal...
>
>
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
