I've checked. In fact the users sometime doesn't use authentication. It seams to be that problem.
Thanks for all reply. -- Leszek Bal 2010/5/17 Eric Shubert <[email protected]> > I don't see any authentication coming from the client in the logs. > The client needs to be configured to authenticate. > > Also, David did mean blacklist. Blacklisting the domains you host is > counter intuitive, but effectively blocks spam that spoofs/forges your > domain name. > > -- > -Eric 'shubes' > > Leszek wrote: > > There is a sample o log when the local user blocked: > > > > serwer.pl <http://serwer.pl> - default domain for serwer > > domain.pl <http://domain.pl> - domain of user account > > > > 05/17/2010 12:00:29 - Remote rDNS = (unknown) > > > > 05/17/2010 12:00:29 LOG OUTPUT > > DEBUG(filter_ip_whitelist()@filter.c:1127): searching IP whitelist > > file(s); ip: 196.36.218.170^M > > DEBUG(filter_ip_blacklist()@filter.c:1177): searching IP blacklist > > file(s); ip: 196.36.218.170^M > > DEBUG(filter_dns_rbl()@filter.c:1527): checking DNS RBL(s); ip: > > 196.36.218.170^M > > FILTER_RBL_MATCH ip: 196.36.218.170 rbl: bl.spamcop.net > > <http://bl.spamcop.net>^M > > > > 05/17/2010 12:00:29 FROM CHILD TO REMOTE: 23 bytes > > 220 domain.pl <http://domain.pl> ESMTP^M > > > > 05/17/2010 12:00:30 FROM REMOTE TO CHILD: 15 bytes > > HELO TSHIDIM1^M > > > > 05/17/2010 12:00:30 FROM CHILD TO REMOTE: 17 bytes > > 250 serwer.pl <http://serwer.pl>^M > > > > 05/17/2010 12:00:30 FROM REMOTE TO CHILD: 42 bytes > > MAIL FROM: <[email protected] > > <mailto:[email protected]>>^M > > > > 05/17/2010 12:00:30 FROM SPAMDYKE TO REMOTE: 66 bytes > > 250 Blocked - see http://www.spamcop.net/bl.shtml?196.36.218.170^M > > > > 05/17/2010 12:00:37 FROM REMOTE TO CHILD: 40 bytes > > RCPT TO: <[email protected] > > <mailto:[email protected]>>^M > > > > 05/17/2010 12:00:37 LOG OUTPUT > > DEBUG(filter_recipient_relay()@filter.c:2183): checking relaying; > > relay-level: 0 recipient: [email protected] > > <mailto:[email protected]> ip: 196.36.218.170 > > rdns: (unknown) local_recipient: true relaying_allowed: false^M > > > > 05/17/2010 12:00:37 FROM SPAMDYKE TO REMOTE: 66 bytes > > 554 Blocked - see http://www.spamcop.net/bl.shtml?196.36.218.170^M > > > > 05/17/2010 12:00:37 LOG OUTPUT > > DENIED_RBL_MATCH from: [email protected] > > <mailto:[email protected]> to: > > [email protected] > > <mailto:[email protected]> origin_ip: > > 196.36.218.170 origin_rdns: (unknown) auth: (unknown)^M > > > > 05/17/2010 12:00:37 CLOSED > > > > -- > > Leszek Bal > > > > > > 2010/5/17 Leszek <[email protected] > > <mailto:[email protected]>> > > > > Blacklist? You probably mean white-list. It's impossible, there are > > about 250 domains. Users are login from several countries. I've > > check debug level and see the log when I find some time to do this. > > Strange thing is that the not all users are blocked. > > > > Thanks for the answers > > -- > > Leszek Bal > > > > 2010/5/15 David Stiller > > <[email protected] > > <mailto:[email protected]>> > > > > It looks like there's missing the authorization info. Did you > > follow our hint to blacklist all > > your local domains? If yes, check that auth is successfull. > > > > > > > > On 14.05.2010 09:57, Leszek wrote: > >> Hi, > >> > >> I've search spamdyke_lists but didn't find the aswer. I'm > >> using spamdyke on Plesk installed on Debian 4.0. The problem > >> is taht the local users sending e-mail are blocked by spamdyke: > >> > >> spamdyke[10333]: DENIED_RBL_MATCH from: > >> [email protected] > >> <mailto:[email protected]> to: > >> [email protected] > >> <mailto:[email protected]> - user > >> tried to send message to itself. > >> > >> This user was authenticated but still blocked by spamdyke. > >> My conf file: > >> > >> greeting-delay-secs=0 > >> reject-missing-sender-mx > >> log-level=debug > >> idle-timeout-secs=300 > >> ip-blacklist-file=/var/qmail/spamdyke/blacklist_ip > >> > recipient-blacklist-file=/var/qmail/spamdyke/blacklist_recipients > >> sender-blacklist-file=/var/qmail/spamdyke/blacklist_senders > >> ip-whitelist-file=/var/qmail/spamdyke/whitelist_ip > >> ip-whitelist-file=/var/qmail/spamdyke/pop-before-smtp > >> rdns-whitelist-file=/var/qmail/spamdyke/whitelist_rdns > >> dns-blacklist-entry=zen.spamhaus.org <http://zen.spamhaus.org> > >> dns-blacklist-entry=bl.spamcop.net <http://bl.spamcop.net> > >> graylist-level=always-create-dir > >> graylist-dir=/var/qmail/spamdyke/greylist > >> graylist-max-secs=1814400 > >> graylist-min-secs=600 > >> smtp-auth-level=ondemand-encrypted > >> smtp-auth-command=/var/qmail/bin/smtp_auth /var/qmail/bin/true > >> /var/qmail/bin/cmd5checkpw /bin/true > >> tls-certificate-file=/var/qmail/control/servercert.pem > >> local-domains-file=/var/qmail/control/rcpthosts > >> rejection-text-graylist=temporary envelope failure (#4.3.0) > >> > >> Any suggestions > >> > >> > >> _______________________________________________ > >> spamdyke-users mailing list > >> [email protected] > >> <mailto:[email protected]> > >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users > > > > > > _______________________________________________ > > spamdyke-users mailing list > > [email protected] > > <mailto:[email protected]> > > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > > > > > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > spamdyke-users mailing list > > [email protected] > > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users >
_______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
