Hi Guys,

Thanks.

I had to disable pf so those email from korea go through, in fact Mr. Sevan 
email did
go through as well.

Sorry I forgot to include my pf.conf This is my pf.conf

table <spamd> persist
table <spamd-white> persist

rdr pass on $ext_if proto tcp from <spamd> to port smtp \
         -> 127.0.0.1 port spamd
rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \
         -> 127.0.0.1 port spamd

pass in log keep state
pass out log keep state

I have a firewall in front of my email server. Still trying spamd before
implementing pf as a firewall.

I have some change in my spamd.conf as suggested by Mr. Sevan
from
all:\
         :spews2:china:korea

to
all:\
         :spews2:white:china:white:korea:white

whitelist:\
         :white:\
         :method=file:\
         :file=/var/mail/whitelist.txt:

I had to kill and restart spamd -v -g

I got whitelist.txt from pfctl -t spamd-white -Tshow > /var/mail/whitelist.txt

Thanks for all. Hope it work. =))

Brgds,
riwan



X-Originating-IP: [217.22.88.123]
X-Originating-Email: [EMAIL PROTECTED]
X-Sender: [EMAIL PROTECTED]
Date: Fri, 14 Jul 2006 02:33:44 +0100
From: Sevan / Venture37 <[EMAIL PROTECTED]>
User-Agent: Thunderbird 1.5.0.4 (Windows/20060516)
To: riwanlky <[EMAIL PROTECTED]>
Subject: Re: spamd greylisting
X-Enigmail-Version: 0.94.0.0
X-OriginalArrivalTime: 14 Jul 2006 01:33:25.0626 (UTC) 
FILETIME=[804365A0:01C6A6E5]
X-Virus-Scanned: ClamAV version 0.88.2, clamav-milter version 0.88.2 on 
puff.mcojaya.com
X-Virus-Status: Clean

check your /etc/spamd.conf
have you added your whitelist to the check list?
http://www.openbsd.org/cgi-bin/man.cgi?query=spamd.conf&sektion=5&arch=i386&apropos=0&manpath=OpenBSD+3.9
Venture37
-- "The truth, the half-truth, and nothing like the truth." - Mark Brandon 
Read


At 07:37 PM 7/13/2006 -0600, Bob Beck wrote:
>         You haven't showed your pf rules.
>
>         If your friend is blocked because you are using the "korea" blacklist
>un-greylisting him won't help.  Using the standard example from the man page:
>
>rdr pass inet proto tcp from <spamd> to any \
>          port smtp -> 127.0.0.1 port spamd
>rdr pass inet proto tcp from !<spamd-white> to any \
>          port smtp -> 127.0.0.1 port spamd
>
>The first rdr line picks up anything in blacklists. If you aren't blacklisted
>then the second line picks up anything that the greylist hasn't passed, and
>rdr is first match.
>
>         If you're in the korea blacklist, and your friends address is,
>using spamdb -a to have it pass the greylist will not help.
>
>         If you correspond with people in korea, using the korea list
>is probably a bad idea.
>
>         -Bob
>
>
>* riwanlky <[EMAIL PROTECTED]> [2006-07-13 19:29]:
> > Hi All,
> >
> > I just configure my first spamd -g, I have a collegue in Korea who is
> > sending
> > me a message, however it did not get through. I tried to whitelist it,
> > however
> > it still did not get through.
> >
> > This is the spamdb
> > WHITE|61.78.36.103|||1152841491|1152841518|1155951918|1|0
> > WHITE|61.78.36.104|||1152842688|1152842688|1155953088|1|0
> >
> > I had to
> > spamdb -a 61.78.36.103 -T
> > spamdb -a 61.78.36.103
> >
> > to get it whitelist, because it is not showing in my spamdb
> >
> > this is my /var/log/daemon
> > Jul 14 09:15:03 puff spamd[3732]: 61.78.36.103: connected (1/1), lists:
> > korea
> > Jul 14 09:15:08 puff spamd[3732]: 61.78.36.103: connected (2/2), lists:
> > korea
> > Jul 14 09:21:37 puff spamd[3732]: 61.78.36.103: disconnected after 394
> > seconds.
> > lists: korea
> > Jul 14 09:21:41 puff spamd[3732]: 61.78.36.103: disconnected after 393
> > seconds.
> > lists: korea
> >
> > in my spamd using pfctl -t spamd -Tshow |grep 61.78
> > # pfctl -t spamd -Tshow |grep 61.78
> >    61.78.51.0/25
> >    61.78.59.35
> >    61.78.59.36
> >    61.78.90.8
> >
> > and spamd-white
> > # pfctl -t spamd-white -Tshow |grep 61.78
> >    61.78.36.103
> >    61.78.36.104
> >
> > So the mail should go through. Something missing?
> >
> > Thanks and looking forward for your help.
> >
> > Brgds,
> > Riwan
> >
>
>--
>| | |         The ASCII Fork Campaign
>  \|/       against gratuitous use of threads.
>   |

Reply via email to