Re: [courier-users] zen.spamhaus.org
One thing you may try is to tune up your DNS server cache(Increase max-cache-size and set cleaning-interval to a value of your choice. Carlos. --- El jue, 4/29/10, Joseph C. Lininger escribió: > De: Joseph C. Lininger > Asunto: [courier-users] zen.spamhaus.org > A: courier-users@lists.sourceforge.net > Fecha: jueves, 29 de abril de 2010, 06:53 am > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Howdy folks, > I was wondering if anyone happens to know if > zen.spamhaus.org is having > any sort of troubles? I've noticed an increase in the > amount of spam > making it through my server, and I checked the mail logs to > see about > the blacklists. The last time anything was blocked by > spamhaus was April > 27 in the evening. I usually have several spamhaus hits per > day. Anyone > else noticing this or did I mess something up on my end and > I just > haven't realized it yet? Thanks in advance for your help. > - -- > They say god has always been. Linux and I will now disprove > that: > $ ar m God > ar: creating God > There you have it. God was created by the ar program. Good > news is, God > really does exist! > Joseph C. Lininger, > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.9 (MingW32) > > iQEcBAEBCAAGBQJL2XMjAAoJEMh8jNraUiwq8zEIAJQT73NRcZTls4dFpL4PG/We > YU2tP7H8tgfYxWE+zTv4bJMQD2GF9hjAGlYzdSjJUdykRmmraheJ+b1JzIl1eO3W > PxdFaUb05DdPrptIj+KdNnUqbBBZBfbOtScAzsPdZ/3xFjXlkCceooI2e9VF9raW > tD0B+hVi7uIsen/Mgvs59/XjNiHy/8ZC1nCWI02XBo0i0O+bVD1GrvCzi84JRekl > 52VCecd+zWdTJfVT/GOFkBMgLN2Bq7PUKvBj0Jvq7N4c0G+A2gR3GBpPXKHMxB1R > XkqJyDugur3AN/rl69aoK6ePbc1s53o5NLdDNpP4lcBx7Pg3modYDKzrne20J7Y= > =UIhN > -END PGP SIGNATURE- > > -- > ___ > courier-users mailing list > courier-users@lists.sourceforge.net > Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users > -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zdkimfilter 0.3
On 29/Apr/10 06:25, Carlos Lopez wrote: > Site is not working :(, check it. A mediaconverter burned out, for ip 85.18.98.155. Is been replaced about 3 hours ago. > Carlos. > > --- El mié, 4/28/10, Alessandro Vesely escribió: >> http://www.tana.it/sw/zdkimfilter/ >> -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Howe to integate ClamAV to scan on SMTP level?
On 28/Apr/10 19:51, Matus UHLAR - fantomas wrote:
> On 28.04.10 12:59, Alessandro Vesely wrote:
>> You mean you read recipients from ctlfile lines starting with "r"?
>
> I already do it in our logging filter.
Fine. I hoped to find a trick to do it for all filters at once.
>> How are you going to handle an abusive message for multiple
>> recipients, only one of which is or? Courier
>> already has a whitelisted/not-whitelisted mechanism, but it only works
>> for whitelistable filters...
>
> what would be the difference between multiple recipients in To/Cc and in
> envelope ?
Not much, besides what Michelle noted. I guess it is a policy rule. A
site's policy might be to only concede special whitelisting when
--or -- is the sole recipient, equally addressed
in envelope and header. (BTW, I get very few spam into these
mailboxes, compared to what I get in into the others.)
The mechanism I was referring to is the one that sets whitelisting
from rcptfilters. Courier splits recipients by temporarily rejecting
the non-matching ones, so as to force the client to send the message
twice.
Global filters not using the "allfilters" socket directory can be
skipped that way, so this could be the trick I was looking for.
However, moving all filters to plain "filters" mode would then require
an extra smtpfilter call for the normal case of global filters being
active, if I've understood it correctly. IOW: by returning 99,
rcptfilters enable _both_ global plain filters and local content
filters. There is no way to enable global but not local ones, is there?
As a final note, recent TB versions apparently skip filtering if
.mailfilter has something like
if ($nofiltering)
{
KEYWORDS="NonJunk"
to "./Maildir/.MyAbuseFolder"
}
--
--
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zen.spamhaus.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Yeah, it's something on this end. Probably the name server we'd been using is being used by others and it did too many queries. I'll set up a local cache on the mail server. That should solve that particular problem since we don't do anywhere near the daily limit for the free service. - -- They say god has always been. Linux and I will now disprove that: $ ar m God ar: creating God There you have it. God was created by the ar program. Good news is, God really does exist! Joseph C. Lininger, -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) iQEcBAEBCAAGBQJL2ZSbAAoJEMh8jNraUiwqM6oIAJ4YC5VKL78GHV813CZa271A Pmb61NKRYxi1XQo+o/XvMTcn6aKt3YPe/RdK/GMFBe4rZhAqY/54Y5KI213ydN70 voEiHYG4TW5GLDdlxG/gzUv7lLO7ja6S+ZXiglhIXNzr4m1fqHbBShCtr/9VkttY upEsBnYTxiPl9PCLz4TVqt+4VBszDWeznZWLWD1KD0gbJfyyvw+sVJxH6w5QxEH4 wCfCzfFY2EwZgf7Juu3Q7f6FOBO6lRHAMGISEtc6PYA3THcqIXs3dpcr/HX7TpHz cKI82UKVk6sZp62xkedmMHnkDQx0wEwvitrmVvB2SM2SgE01Adr7D2DCozvVhns= =Qh8w -END PGP SIGNATURE- -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zen.spamhaus.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Howdy again folks, I checked into this a bit more and I found that positive responses for the test system are returned from a machine other than the server I was using. That machine uses a different dns server, so that must be what happened. The recursive name server we've been using obviously did too many combined queries. How irritating. Thank you for your help Jerome. - -- They say god has always been. Linux and I will now disprove that: $ ar m God ar: creating God There you have it. God was created by the ar program. Good news is, God really does exist! Joseph C. Lininger, -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) iQEcBAEBCAAGBQJL2ZPbAAoJEMh8jNraUiwq8oMIAIcU427yEyUoGheJZJnOhX3j RQdhWkv5bQcuH7pKQ+KVzcmVQBcYc0R4TIUCl/cSkEOTrFJb1/WMnRJsyP/SKUJd JsnUPyH4n0o31Iy/rYXAyXsjPCNcwGcTcnVRVu5Y5neSpkq1d4sUA0gtaG4rV5D4 WemfNTU59v5Xpkun7RxoWA36aH2wUty2n00nbJjNMuXji24HW4WwBW5Tf5fE61yV oDDNRx+YQRCdCZaDgMajC3JWv6AOKoCK5x/SUYIF1zdidrqIQ5egNag1ITDNtFR+ 1B3DFY0wTVzhGLa8+7Wtru5d5omJ1E+igaQBQmZWUDtVGtmiTIkUnWqHl9KGmfo= =9wmm -END PGP SIGNATURE- -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zen.spamhaus.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > Spamhaus is known to block DNS servers who perform too many queries to > their DNS servers. > If you use your ISP DNS, it could be the iss ue. One easy thing to > test: I'm aware of that particular limitation. We have been using a DNS server other than the ISP's. However, it is one others have access to, so I suppose that could be the problem. However, I'm not getting an error looking up stuff. It's just everything appears to be returning nxdomain. I tested this using nslookup. In addition, I performed the test spamhaus says to perform in order to test the blacklist functionality. It returned a message to me saying my blacklisting was not working properly. Here is my config line from /etc/courier/esmtpd: BLACKLISTS='-block=zen.spamhaus.org,BLOCK' I haven't changed anything though, so I don't think this would be the problem. Interestingly, there was some kind of networking issue at the site where this server is located, hardware problem. No lookups have returned positive since right around the time that happened. - -- They say god has always been. Linux and I will now disprove that: $ ar m God ar: creating God There you have it. God was created by the ar program. Good news is, God really does exist! Joseph C. Lininger, -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) iQEcBAEBCAAGBQJL2ZD6AAoJEMh8jNraUiwqctMH/23PpUoIuG1SUQuGxV7o1L9F lanvZ2xTmfgtchZCdhYTAAETs5WEJsne0GDsv27w5aTfseisVx5deDvX8yZehTTV vpvV4/iR7BT6C20ootPmBCh6dmo7IEprPvTdYtQ6QKXguBB7sV51HHvLpZoMHU+G 4na7+N3DaTyZhP36WYexSawHX2D76yddl/cGK0GSNtWpUKJsw9n0Rw7GahMqCIPm 0id/V1V+y7yqLmSxQ9StyqsOPuKGlJCzmLHBzY/NdKKjz2PEavz22XAmvcKnPtcM NkiLfo+B9fKYAx1GabAzmZqQMp//l7qkHlCmywGRc3+tX5bLoEb2PNRnKJjaQtE= =lLfz -END PGP SIGNATURE- -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zen.spamhaus.org
Joseph C. Lininger wrote: > Howdy folks, > I was wondering if anyone happens to know if zen.spamhaus.org is having > any sort of troubles? I've noticed an increase in the amount of spam > making it through my server, and I checked the mail logs to see about > the blacklists. The last time anything was blocked by spamhaus was April > 27 in the evening. I usually have several spamhaus hits per day. Anyone > else noticing this or did I mess something up on my end and I just > haven't realized it yet? Thanks in advance for your help. I'm still seeing about 8000 messages blocked per day (1600 so far this morning). So it seems to be working fine. -- Bowie -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] zen.spamhaus.org
On Thu, 29 Apr 2010 05:53:07 -0600, "Joseph C. Lininger" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Howdy folks, > I was wondering if anyone happens to know if zen.spamhaus.org is having > any sort of troubles? I've noticed an increase in the amount of spam > making it through my server, and I checked the mail logs to see about > the blacklists. The last time anything was blocked by spamhaus was April > 27 in the evening. I usually have several spamhaus hits per day. Anyone > else noticing this or did I mess something up on my end and I just > haven't realized it yet? Thanks in advance for your help. Hello, Spamhaus is known to block DNS servers who perform too many queries to their DNS servers. If you use your ISP DNS, it could be the issue. One easy thing to test: nslookup .zen.spamhaus.org @ nslookup .zen.spamhaus.org @ For example, Google DNS are blocked. HTH. Jerome -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] zen.spamhaus.org
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Howdy folks, I was wondering if anyone happens to know if zen.spamhaus.org is having any sort of troubles? I've noticed an increase in the amount of spam making it through my server, and I checked the mail logs to see about the blacklists. The last time anything was blocked by spamhaus was April 27 in the evening. I usually have several spamhaus hits per day. Anyone else noticing this or did I mess something up on my end and I just haven't realized it yet? Thanks in advance for your help. - -- They say god has always been. Linux and I will now disprove that: $ ar m God ar: creating God There you have it. God was created by the ar program. Good news is, God really does exist! Joseph C. Lininger, -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) iQEcBAEBCAAGBQJL2XMjAAoJEMh8jNraUiwq8zEIAJQT73NRcZTls4dFpL4PG/We YU2tP7H8tgfYxWE+zTv4bJMQD2GF9hjAGlYzdSjJUdykRmmraheJ+b1JzIl1eO3W PxdFaUb05DdPrptIj+KdNnUqbBBZBfbOtScAzsPdZ/3xFjXlkCceooI2e9VF9raW tD0B+hVi7uIsen/Mgvs59/XjNiHy/8ZC1nCWI02XBo0i0O+bVD1GrvCzi84JRekl 52VCecd+zWdTJfVT/GOFkBMgLN2Bq7PUKvBj0Jvq7N4c0G+A2gR3GBpPXKHMxB1R XkqJyDugur3AN/rl69aoK6ePbc1s53o5NLdDNpP4lcBx7Pg3modYDKzrne20J7Y= =UIhN -END PGP SIGNATURE- -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Howe to integate ClamAV to scan on SMTP level?
> >> Mails to and should be passed as they are. > > [...] > > On 19.04.10 14:00, Michelle Konzack wrote: > >> Is it not enough to catch the To: and Cc: from the incoming mail and if > >> it is for or stop the processing and return an Exit > >> Status 0? > On 26/Apr/10 17:25, Matus UHLAR - fantomas wrote: > > The real recipient might not be in To/Cc and vice versa. > > I'm working on the script. On 28.04.10 12:59, Alessandro Vesely wrote: > You mean you read recipients from ctlfile lines starting with "r"? > > How are you going to handle an abusive message for multiple > recipients, only one of which is or ? Courier > already has a whitelisted/not-whitelisted mechanism, but it only works > for whitelistable filters... hmmm, I feel to be a bit out... what mechanism? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Saving Private Ryan... Private Ryan exists. Overwrite? (Y/N) -- ___ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
