Jake Vickers wrote:
Jim Shupert wrote:
Eric Shubert wrote:
Jim Shupert wrote:
could someone remind me how I might look in the logs to see any and
all references to b...@billybob.com
here is my situation a user says she is not getting email from (
let us call them ) bi...@billybob.com
so i wish to see if billy mail hits my server and is ???? rejected
or what not etc.
thanks!
jS
Providing you have QTP installed (and you really should),
# qmlog -lc "bi...@billybob\.com" smtp
Cool, eh?
Most Cool -- Thanks!
-- i wish i had a better idea on how to understand the log
might you tell me what relevance the below has - what it means ? why
the reject?
< snip
10-26 08:36:31 CHKUSER accepted sender: from <bi...@billybob.com::>
remote <mail-out2.fuse.net:unknown:216.68.8.171>
rcpt <> : sender accepted
10-26 08:36:31 qmail-smtpd: spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:bi...@billybob.com
10-26 08:36:36 tcpserver: end 3876 status 0
10-26 08:36:36 tcpserver: status: 0/100
10-26 08:36:39 tcpserver: status: 1/100
10-26 08:36:39 tcpserver: pid 3877 from 217.23.9.164
10-26 08:36:39 tcpserver: ok 3877
sifter.pps-inc.com:192.168.200.222:25 :217.23.9.164::1803
10-26 08:36:39 tcpserver: status: 2/100
10-26 08:36:39 tcpserver: pid 3878 from 216.37.105.169
10-26 08:36:39 tcpserver: ok 3878
sifter.pps-inc.com:192.168.200.222:25 :216.37.105.169::33074
10-26 08:36:39 rblsmtpd: 216.37.105.169 pid 3878: 451
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL77346
</snip
spf-reject: HELO(mail-out2.fuse.net) from
216.68.8.171. MAILFROM:bi...@billybob.com
and i did a spf test w http://www.kitterman.com/spf/validate.html
Found v=spf1 record for billybob.com
v=spf1 a mx a:ecsubs.com include:cust-spf.exacttarget.com -all
my bottom line is it looks like it was accepted [ accepted sender:
from <bi...@billybob.com::> ]
so maybe I should ask my user to look in her spam folder?
any informed insights welcomed -- i am learning ....THANKS!
( and I have changed the name & domain , of course )
It accepted it because the sender was okay, but the SPF record did not
pass. Check your /var/qmail/control/spfbehavior file. It's probably at
the default of 3 which is okay for most, but you may need to lower it
to 2 or 1 to get that particular email to work. There's more info on
the wiki.
so more info on the wiki is
http://wiki.qmailtoaster.com/index.php/QMT-ISO_Manual_Guide
so I just do the below --( so do 2 things
Configure Domain's SPF
You can add SPF record for your domain, so other mailserver can
recognize which email was sent using your mailserver. Visit SPF
<http://wiki.qmailtoaster.com/index.php/SPF> page for detail info about it.
For your information, there are some admin that may provide SPF record
for their domain is wrong syntax. Or DNS server that provide SPF record
down. So it may reject emails to your server.
thing 1
What I do is change the value into 1
# vi /var/qmail/control/spfbehavior
1
# qmailctl restart
Then add these SA rules, so it can prevent bad emails
thing 2
# vi /etc/mail/spamassassin/local.cf
# add score to softfail SPF
header spf_softfail Received-SPF =~ /\bsoftfail\b/
score spf_softfail 1.0
# add score to fail SPF
header spf_fail Received-SPF =~ /\bfail\b/
score spf_fail 2.0
# qmail-spam restart
and would it be true that i can just cut & paste the above ?
thanks!
