I seem to recall that spamdyke's FILTER_* messages correlate to DENIED_*
messages, where DENIED_* is a real rejectionand FILTER_* indicates that
the rule fired but was not active, sort of a test/evaluation mode. Check
into the spamdyke documentation on that.
What's in your spamdyke.conf file?
Ronnie Tartar wrote:
Below is my smtp run file, I am running Spamdyke. Doesn't seem to be
functioning properly.
It's rejecting mail in my /var/log/maillog file.
Aug 24 14:16:48 mail spamdyke[26064]: FILTER_RDNS_RESOLVE ip: 41.221.76.40
rdns: ip-41-221-76-40.teledata.mz
Aug 24 14:16:50 mail spamdyke[26079]: FILTER_RBL_MATCH ip: 84.10.35.5 rbl:
bl.spamcop.net
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/local/bin/spamdyke -f /etc/spamdyke.conf"
BLACKLIST=`cat /var/qmail/control/blacklists`
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
RBLSMTPD="/usr/bin/rblsmtpd"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0
exec /usr/bin/softlimit -m 100000000 \
/usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
$SPAMDYKE \
$RBLSMTPD $BLACKLIST $SMTPD $VCHKPW /bin/true 2>&1
-----Original Message-----
From: news [mailto:n...@ger.gmane.org] On Behalf Of Eric Shubert
Sent: Monday, August 24, 2009 1:21 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Issues with SpamAssassin
I see that you're not running spamdyke. FH_RELAY_NODNS scores only 1.5?
When that condition exists, spamdyke flat out rejects it (in the default
configuration - you can tailor that if you really need to).
I would install spamdyke, and watch your server breath a sigh of relief
afterwards. ;) There will be a lot less scanning being done, because
spamdyke rejects spam up front before it's even received. I'll bet that
your users will notice the difference too.
Ronnie Tartar wrote:
I have users that are now getting hundreds of spam messages through the
the filter. Seems strange...
Any help?
Below is a header
Received: (qmail 10274 invoked by uid 89); 23 Aug 2009 21:33:53 -0000
Received: by simscan 1.3.1 ppid: 10264, pid: 10266, t: 0.4152s
scanners: attach: 1.3.1 clamav: 0.94.2/m: spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail.host2max.com
X-Spam-Level: **
X-Spam-Status: No, hits=2.2 required=5.0 tests=DK_SIGNED,DK_VERIFIED,
FH_RELAY_NODNS,RDNS_NONE,SARE_MONEYTERMS autolearn=noversion=3.2.5
X-Spam-REPORT:
* 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS
* 0.0 DK_SIGNED Domain Keys: message has a signature
* -0.0 DK_VERIFIED Domain Keys: signature passes verification
* 0.7 SARE_MONEYTERMS BODY: Talks about money in some way.
* 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Received: from unknown (HELO mail.ityetnodit.com) (209.124.84.94)
by mail.host2max.com with SMTP; 23 Aug 2009 21:33:52 -0000
Received-SPF: pass (mail.host2max.com: SPF record at mail.ityetnodit.com
designates 209.124.84.94 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=main; d=mail.ityetnodit.com;
b=GfuKusaE/IPPb9kGy6Loor9EVZk9Q29LgKvrGrh+ncckvXhSxBPpPY+WNyC3aXGk6hHMaj2ugT
SMtOgAYn5eBA==;
h=Received:Message-ID:Date:From:To:Subject:List-Unsubscribe:MIME-Version:Con
tent-Type:Content-Transfer-Encoding;Received:
by 209.124.84.94 with SMTP id j66ou745dzpl5x3 for <user email
replaced>; Sun, 23 Aug 2009 16:32:39 -0500Message-ID:
<ygl4rfezot-4...@mail.ityetnodit.com>Date: Sun, 23 Aug 2009 16:32:39
-0500From: "BankruptcyRights" <bankruptcyrights....@mail.ityetnodit.com>
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
