Hi Jeff, To answer your first question, the tcp.smtp file and related files now reside in /etc/tcprules.d. As far as your second question goes, I haven't used spamdyke so I can't speak to anything regarding that. Perhaps Eric or someone with some more experience can help you there.
When you turned off ClamAV, did you also remove it from simscan and run "qmailctl cdb" after doing so? -Sean > On Apr 28, 2017, at 8:26 PM, Jeff Koch <[email protected]> wrote: > > > Hi - we're running a new qmailtoaster (installed in March 2017) on a new > CentOS 7 server. We're seeing a large number of soft rejects in the > /var/log/qmail/smtp log that look like this: > > qmail-smtpd: qq soft reject (mail server temporarily rejected message > (#4.3.0)): > > We tried turning off ClamAV to see if that helped but it didn't. However, > these rejects seem to be accompanied by the following spamdyke errors in the > /var/log/maillog: > > Apr 28 09:52:29 server spamdyke[20476]: ERROR: unable to open file for > searching /home/vpopmail/etc/tcp.s > mtp: No such file or directory > Apr 28 09:52:29 server spamdyke[20476]: ERROR: unable to open file for > searching /home/vpopmail/etc/open-smtp: No such file or directory > Apr 28 09:52:32 server spamdyke[20476]: ERROR: unable to load or decrypt > SSL/TLS private key from file: /home/vpopmail/spamdyke/server_domain_net.key > : A protocol or library failure occurred, > error:0B080074:lib(11):func(128):reason(116) > Apr 28 09:52:32 server spamdyke[20476]: ERROR: incorrect SSL/TLS private key > password or SSL/TLS certificate/privatekey > mismatch/home/vpopmail/spamdyke/server_domain_net.key : A protocol or library > failure occurred, error:140A80B1:lib(20):func(168):reason(177) > Apr 28 09:52:32 server spamdyke[20476]: ERROR: unable to initialize SSL/TLS > library > Apr 28 09:52:32 server spamdyke[20476]: TLS_ENCRYPTED from: (unknown) to: > (unknown) origin_ip: 200.xx.xx.10 origin_rdns: ns.blah-blah.net auth: > (unknown) encryption: TLS_PASSTHROUGH reason: (empty) > > First Question - where did tcp.smtp go that used to reside in > /home/vpopmail/etc in the old toasters? > > Second Question - /home/vpopmail/spamdyke/server_domain_net.key does exist so > what could be the reason why spamdyke is unable to decrypt the private key? > > Thanks for any insights you guys might have. > > Jeff Koch
