From: [email protected] [mailto:[email protected]] On Behalf Of Nigel Kukard Sent: Thursday, May 27, 2010 6:08 PM To: [email protected] Subject: Re: [policyd-users] Certain domains being ignored On 05/27/10 22:00, Jason Gauthier wrote: From: [email protected] [mailto:[email protected]] On Behalf Of Nigel Kukard Sent: Thursday, May 27, 2010 5:53 PM To: [email protected] Subject: Re: [policyd-users] Certain domains being ignored On 05/27/10 21:50, Jason Gauthier wrote: > I've been using Policydv2 for a few weeks. (was a policydv1 user for years). I just noticed something, that I do not know how to solve. >I host multiple domains. Two of these domains are not being greylist checked OR SPF checked. >I am using the default policy on both of these, which has the source and destination set to "any". >I'm not sure where else to look. Any pointers? >Enable full debugging and watch the logs when mail from the domain comes through. This may reveal more information. >-N >I've been doing that. Absolutely nothing is logged. (Other than the connection from localhost) >Attach the logs please from when you start up policyd. If policyd is not getting any connections, then postfix is not sending policy delegation requests. >Also attach your config files if possible. >-N I think I was misunderstood. It is definitely getting connection request. Here is a small sampling of the log: [2010/05/27-17:58:10 - 4019] [CBPOLICYD] DEBUG: Starting up caching engine [2010/05/27-17:58:11 - 3999] [CHECKSPF] DEBUG: SPF result: bounce.secureserver.net: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:spf.secureserver.net' matched) [2010/05/27-17:58:11 - 4014] [CHECKSPF] DEBUG: SPF result: bounce.secureserver.net: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:spf.secureserver.net' matched) [2010/05/27-17:58:11 - 4005] [CHECKSPF] DEBUG: SPF result: bounce.secureserver.net: Sender is authorized to use '[email protected]' in 'mfrom' identity (mechanism 'include:spf.secureserver.net' matched) [2010/05/27-17:58:11 - 2052] [CORE] INFO: Starting "1" children [2010/05/27-17:58:11 - 4020] [CORE] DEBUG: Child Preforked (4020) [2010/05/27-17:58:11 - 4020] [CBPOLICYD] DEBUG: Starting up caching engine [2010/05/27-17:58:14 - 4018] [CORE] INFO: 2010/05/27-17:58:14 CONNECT TCP Peer: "127.0.0.1:59598" Local: "127.0.0.1:10031" [2010/05/27-17:58:14 - 3964] [CORE] INFO: 2010/05/27-17:58:14 CONNECT TCP Peer: "127.0.0.1:59599" Local: "127.0.0.1:10031" [2010/05/27-17:58:14 - 4014] [CORE] INFO: 2010/05/27-17:58:14 CONNECT TCP Peer: "127.0.0.1:59600" Local: "127.0.0.1:10031" [2010/05/27-17:58:19 - 4005] [CORE] INFO: 2010/05/27-17:58:19 CONNECT TCP Peer: "127.0.0.1:59626" Local: "127.0.0.1:10031" [2010/05/27-17:58:19 - 4018] [CORE] INFO: 2010/05/27-17:58:19 CONNECT TCP Peer: "127.0.0.1:59628" Local: "127.0.0.1:10031" [2010/05/27-17:58:19 - 3999] [CORE] INFO: 2010/05/27-17:58:19 CONNECT TCP Peer: "127.0.0.1:59630" Local: "127.0.0.1:10031" [2010/05/27-17:58:27 - 4020] [CORE] INFO: 2010/05/27-17:58:27 CONNECT TCP Peer: "127.0.0.1:59634" Local: "127.0.0.1:10031" [2010/05/27-17:58:27 - 2052] [CORE] INFO: Starting "1" children [2010/05/27-17:58:27 - 4032] [CORE] DEBUG: Child Preforked (4032) [2010/05/27-17:58:27 - 4032] [CBPOLICYD] DEBUG: Starting up caching engine I only get one of these: [2010/05/27-17:58:19 - 4018] [CORE] INFO: 2010/05/27-17:58:19 CONNECT TCP Peer: "127.0.0.1:59628" Local: "127.0.0.1:10031" When I email the two domains I've identified. Let me know if you would like me to attach more info. It's a pretty heavily used mail server, so the logs grow quickly. Jason Enable debugging for everything, it may be best to identify the domain, then setup a test box to run tests on. I wouldn't advise running tests or enabling debugging on a heavily production machine unless absolutely necessary. -N How do you suggest enabling debugging for everything? I have a test server, but I cannot redirect these domains to it. I will do my testing outside of business hours, and the impact is reduced significantly. I have log_level=4 in cluebringer.conf Is there a per-module option too?
_______________________________________________ Users mailing list [email protected] http://lists.policyd.org/mailman/listinfo/users
