Re: [qmailtoaster] Re: barracuda rbl
Thanks Eric! Planning on doing it this weekend. Cheers! Scott Eric Shubert wrote: Hey Scott. Thanks for this. BTW, I think you'll be kicking yourself for not using spamdyke earlier. ;) Be sure to use the qtp-install-spamdyke script to install it. You also might want to turn off greylisting initially, and implement it on a per-domain basis. Greylisting can be annoying to some users. - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Spamdyke definitely looks interesting, it's now on my to-do list. In the meantime however, I discovered the solution to my immediate problem, in case anyone else is having the same issue. To give credit, I found it here: gossamer-threads.com/lists/qmail/users/137702 From gossamer threads list: If, like me, you noticed that your b.barracudacentral.org based rblsmtpd blacklisting is not working anymore, you can try to replace the : -r b.barracudacentral.org part by : -r b.barracudacentral.org:IP_%IP%_blacklisted_by_barracudacentral.org in your qmail-smtpd/run file. It may solve the issue (it did here). Other lists like for example zen.spamhaus.org are fine, because they are still setting a TXT record for listed IP's, but it is not the case (anymore) for the barracuda RBL. You will probably need a patched rblsmptd version for that (with ucspi-rss.patch or ucspi-rss2.patch from qmail.jms1.net/ucspi-tcp/ ) And it worked for me to. Cheers! Scott Pablo Gonzalez wrote: Great!! Excelent!! Thanks very much Eric! Pablo González A. On 6 October 2010 10:37, Eric Shuberte...@shubes.net wrote: Brent Gardner wrote: Eric Shubert wrote: Brent, where'd you pick it up? I need to get this included with QTP. Sorry, I was offline all weekend. Here's a link to the script: http://pastebin.com/7Ey3ufcX I found the original on the spamdyke-users mailing list and fixed the section that is supposed to process Qmail logs. Brent Gardner Thanks Brent. I'll try to keep better track of it this time. ;) -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Great!! Excelent!! Thanks very much Eric! Pablo González A. On 6 October 2010 10:37, Eric Shubert e...@shubes.net wrote: Brent Gardner wrote: Eric Shubert wrote: Brent, where'd you pick it up? I need to get this included with QTP. Sorry, I was offline all weekend. Here's a link to the script: http://pastebin.com/7Ey3ufcX I found the original on the spamdyke-users mailing list and fixed the section that is supposed to process Qmail logs. Brent Gardner Thanks Brent. I'll try to keep better track of it this time. ;) -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: barracuda rbl
Brent Gardner wrote: Eric Shubert wrote: Brent, where'd you pick it up? I need to get this included with QTP. Sorry, I was offline all weekend. Here's a link to the script: http://pastebin.com/7Ey3ufcX I found the original on the spamdyke-users mailing list and fixed the section that is supposed to process Qmail logs. Brent Gardner Thanks Brent. I'll try to keep better track of it this time. ;) -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Eric Shubert wrote: Brent, where'd you pick it up? I need to get this included with QTP. Sorry, I was offline all weekend. Here's a link to the script: http://pastebin.com/7Ey3ufcX I found the original on the spamdyke-users mailing list and fixed the section that is supposed to process Qmail logs. Brent Gardner - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: barracuda rbl
Brent, where'd you pick it up? I need to get this included with QTP. -- -Eric 'shubes' Pablo Gonzalez wrote: Hi Eric, where find script by statistic for spamdyke? thanks Pablo Gonzalez On 29 September 2010 19:26, Brent Gardner brent.gard...@gmail.com wrote: Eric Shubert wrote: Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I see log entries like these in my qmail SMTP logs: 2010-09-29 00:09:35.848868500 spamdyke[26849]: FILTER_RBL_MATCH ip: 91.103.153.225 rbl: zen.spamhaus.org 2010-09-29 00:09:37.671613500 spamdyke[26849]: DENIED_RBL_MATCH from: em...@dhiejchagh.malenkijlvenok.com to: us...@example.com origin_ip: 91.103.153.225 origin_rdns: nat-225-153-103-91.generalnet.net auth: (unknown) Sometimes there's a few entries in between, but they're not too hard to match up. The spamdyke-stats script will break it down by BL: 1286 26.56% DENIED_RDNS_RESOLVE 1243 25.67% DENIED_RDNS_MISSING 855 17.66% ALLOWED 510 10.53% ERROR 4639.56% TIMEOUT 4489.25% DENIED_RBL_MATCH --- Breakdown --- 256 62.13% zen.spamhaus.org 156 37.86% bl.spamcop.net - 290.59% DENIED_OTHER 70.14% DENIED_SENDER_NO_MX Summary Allowed: 855 17.66% Timeout: 4639.56% Errors : 510 10.53% Denied : 3013 62.23% Total : 4841 100.00% Brent Gardner - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Hi Eric, where find script by statistic for spamdyke? thanks Pablo Gonzalez On 29 September 2010 19:26, Brent Gardner brent.gard...@gmail.com wrote: Eric Shubert wrote: Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I see log entries like these in my qmail SMTP logs: 2010-09-29 00:09:35.848868500 spamdyke[26849]: FILTER_RBL_MATCH ip: 91.103.153.225 rbl: zen.spamhaus.org 2010-09-29 00:09:37.671613500 spamdyke[26849]: DENIED_RBL_MATCH from: em...@dhiejchagh.malenkijlvenok.com to: us...@example.com origin_ip: 91.103.153.225 origin_rdns: nat-225-153-103-91.generalnet.net auth: (unknown) Sometimes there's a few entries in between, but they're not too hard to match up. The spamdyke-stats script will break it down by BL: 1286 26.56% DENIED_RDNS_RESOLVE 1243 25.67% DENIED_RDNS_MISSING 855 17.66% ALLOWED 510 10.53% ERROR 463 9.56% TIMEOUT 448 9.25% DENIED_RBL_MATCH --- Breakdown --- 256 62.13% zen.spamhaus.org 156 37.86% bl.spamcop.net - 29 0.59% DENIED_OTHER 7 0.14% DENIED_SENDER_NO_MX Summary Allowed: 855 17.66% Timeout: 463 9.56% Errors : 510 10.53% Denied : 3013 62.23% Total : 4841 100.00% Brent Gardner - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Eric Shubert wrote: Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I see log entries like these in my qmail SMTP logs: 2010-09-29 00:09:35.848868500 spamdyke[26849]: FILTER_RBL_MATCH ip: 91.103.153.225 rbl: zen.spamhaus.org 2010-09-29 00:09:37.671613500 spamdyke[26849]: DENIED_RBL_MATCH from: em...@dhiejchagh.malenkijlvenok.com to: us...@example.com origin_ip: 91.103.153.225 origin_rdns: nat-225-153-103-91.generalnet.net auth: (unknown) Sometimes there's a few entries in between, but they're not too hard to match up. The spamdyke-stats script will break it down by BL: 1286 26.56% DENIED_RDNS_RESOLVE 1243 25.67% DENIED_RDNS_MISSING 855 17.66% ALLOWED 510 10.53% ERROR 4639.56% TIMEOUT 4489.25% DENIED_RBL_MATCH --- Breakdown --- 256 62.13% zen.spamhaus.org 156 37.86% bl.spamcop.net - 290.59% DENIED_OTHER 70.14% DENIED_SENDER_NO_MX Summary Allowed: 855 17.66% Timeout: 4639.56% Errors : 510 10.53% Denied : 3013 62.23% Total : 4841 100.00% Brent Gardner - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: barracuda rbl
Brent Gardner wrote: Eric Shubert wrote: Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I see log entries like these in my qmail SMTP logs: 2010-09-29 00:09:35.848868500 spamdyke[26849]: FILTER_RBL_MATCH ip: 91.103.153.225 rbl: zen.spamhaus.org 2010-09-29 00:09:37.671613500 spamdyke[26849]: DENIED_RBL_MATCH from: em...@dhiejchagh.malenkijlvenok.com to: us...@example.com origin_ip: 91.103.153.225 origin_rdns: nat-225-153-103-91.generalnet.net auth: (unknown) Sometimes there's a few entries in between, but they're not too hard to match up. The spamdyke-stats script will break it down by BL: 1286 26.56% DENIED_RDNS_RESOLVE 1243 25.67% DENIED_RDNS_MISSING 855 17.66% ALLOWED 510 10.53% ERROR 4639.56% TIMEOUT 4489.25% DENIED_RBL_MATCH --- Breakdown --- 256 62.13% zen.spamhaus.org 156 37.86% bl.spamcop.net - 290.59% DENIED_OTHER 70.14% DENIED_SENDER_NO_MX Summary Allowed: 855 17.66% Timeout: 4639.56% Errors : 510 10.53% Denied : 3013 62.23% Total : 4841 100.00% Brent Gardner - I sit corrected. I don't see the filter messages with log level info. Need verbose level to get those. What's the general consensus on a default log level for spamdyke? I'm thinking I should change the default configuration in qtp-install-spamdyke to log verbose so that RBL messages show up. Anyone have thoughts on this? -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
I would like that. Scott On Sep 29, 2010, at 6:38 PM, Eric Shubert e...@shubes.net wrote: Brent Gardner wrote: Eric Shubert wrote: Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I see log entries like these in my qmail SMTP logs: 2010-09-29 00:09:35.848868500 spamdyke[26849]: FILTER_RBL_MATCH ip: 91.103.153.225 rbl: zen.spamhaus.org 2010-09-29 00:09:37.671613500 spamdyke[26849]: DENIED_RBL_MATCH from: em...@dhiejchagh.malenkijlvenok.com to: us...@example.com origin_ip: 91.103.153.225 origin_rdns: nat-225-153-103-91.generalnet.net auth: (unknown) Sometimes there's a few entries in between, but they're not too hard to match up. The spamdyke-stats script will break it down by BL: 1286 26.56% DENIED_RDNS_RESOLVE 1243 25.67% DENIED_RDNS_MISSING 855 17.66% ALLOWED 510 10.53% ERROR 4639.56% TIMEOUT 4489.25% DENIED_RBL_MATCH --- Breakdown --- 256 62.13% zen.spamhaus.org 156 37.86% bl.spamcop.net - 290.59% DENIED_OTHER 70.14% DENIED_SENDER_NO_MX Summary Allowed: 855 17.66% Timeout: 4639.56% Errors : 510 10.53% Denied : 3013 62.23% Total : 4841 100.00% Brent Gardner - I sit corrected. I don't see the filter messages with log level info. Need verbose level to get those. What's the general consensus on a default log level for spamdyke? I'm thinking I should change the default configuration in qtp-install-spamdyke to log verbose so that RBL messages show up. Anyone have thoughts on this? -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: barracuda rbl
South Computers wrote: Not sure how long it has been since it worked, spam getting through has been up the last week or so, noticed barracuda wasn't catching anything. Is it just me or can anyone else resolve to their blacklist? Getting a host not found / unknown host for b.barracudacentral.org Thanks, Scott - I don't know. FWIW, I only use the following, with spamdyke: dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net -- -Eric 'shubes' - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: barracuda rbl
Actually I normally use it with my regular blacklists file. Still haven't gotten around to using spamdyke :-) Is Spamcop working well these days? Does it resolve for you? Thanks, Scott Eric Shubert wrote: South Computers wrote: Not sure how long it has been since it worked, spam getting through has been up the last week or so, noticed barracuda wasn't catching anything. Is it just me or can anyone else resolve to their blacklist? Getting a host not found / unknown host for b.barracudacentral.org Thanks, Scott - I don't know. FWIW, I only use the following, with spamdyke: dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: barracuda rbl
Spamdyke doesn't (yet) indicate which BL a rejection corresponds to, so I can't see how well a given list is working. I get BL rejections than I used to though, as spamdyke rejects many of them based on rDNS rules. You really should give spamdyke a try. It's trivial to install with the qtp-install-spamdyke script. It will noticably lighten the load on your server, as there will be fewer email to scan. If you don't like it (you'd be the first), it's easy to disable too. -- -Eric 'shubes' South Computers wrote: Actually I normally use it with my regular blacklists file. Still haven't gotten around to using spamdyke :-) Is Spamcop working well these days? Does it resolve for you? Thanks, Scott Eric Shubert wrote: South Computers wrote: Not sure how long it has been since it worked, spam getting through has been up the last week or so, noticed barracuda wasn't catching anything. Is it just me or can anyone else resolve to their blacklist? Getting a host not found / unknown host for b.barracudacentral.org Thanks, Scott - I don't know. FWIW, I only use the following, with spamdyke: dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=bl.spamcop.net - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
