Re: [qmailtoaster] Validating RBLs are in use

[Eric Broch]

I'm not sure that one can sign up any more. I'll see if I can figure 
something out, or if someone knows better, please speak up.



On 2/16/2017 10:00 AM, Chris wrote:
If the wiki is open to community editing, I'm happy to add updates to 
legacy pages where the functionality has moved or changed.


-Chris

On Wed, Feb 15, 2017 at 12:33 PM, Eric Broch > wrote:


It's the same as my centos 6 run scripts, in fact that's where I
got the original src rpms for centos 7. I think Eric Shubert had
spamdyke in mind.


On 2/15/2017 1:26 PM, Chris wrote:

I gotta ask, while you said this was a stock QMT install, when
was it built?

I literally, in the last twenty minutes, spun up a new CentOS 7
VM, and installed QMT via the instructions and scripts from
http://www.qmailtoaster.com/, and I have a different
/var/qmail/supervise/smtp/run from you:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c
"$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1




On Tue, Feb 14, 2017 at 9:52 AM, CarlC Internet Services Service
Desk > wrote:

Chris,

I loaded a stock QMT install, and in
/var/qmail/supervise/smtp/run, it has the line:

BLACKLIST=`cat /var/qmail/control/blacklists`

Which is used by SMTP before SPAMDYKE is called:

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c
"$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $RBLSMTPD $BLACKLIST \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1

I would think you could use either blacklists in
/var/qmail/control/ or the spamdyke config. Either should
work... Using RBL to block it might be faster/less load on
the server than waiting for SpamDyke to startup, but either
way will work.

And for blacklist in /var/qmail/control/blacklists, mine is:

-r b.barracudacentral.org
 -r bl.spamcop.net
 -r zen.spamhaus.org
 -r cbl.abuseat.org
 -r dul.dnsbl.sorbs.net


Note: to use barracudacentral, you must sign up with them and
give them your IP address to allow access. So don't
Copy/Paste this unless you're signed up with barracuda. It is
free, and barracuda only blocks KNOWN/HARD spammers.

In either case, you would see the blocks in the
/var/log/qmail/smtp/current [or other files in that area].

Carl


-
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





-- 
Eric Broch, IMSO, DAM, NGOO, DITH, URTS

White Horse Technical Consulting (WHTC)




--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Validating RBLs are in use

[Chris]

If the wiki is open to community editing, I'm happy to add updates to
legacy pages where the functionality has moved or changed.

-Chris

On Wed, Feb 15, 2017 at 12:33 PM, Eric Broch 
wrote:

> It's the same as my centos 6 run scripts, in fact that's where I got the
> original src rpms for centos 7. I think Eric Shubert had spamdyke in mind.
>
> On 2/15/2017 1:26 PM, Chris wrote:
>
> I gotta ask, while you said this was a stock QMT install, when was it
> built?
>
> I literally, in the last twenty minutes, spun up a new CentOS 7 VM, and
> installed QMT via the instructions and scripts from
> http://www.qmailtoaster.com/, and I have a different
> /var/qmail/supervise/smtp/run from you:
>
> #!/bin/sh
> QMAILDUID=`id -u vpopmail`
> NOFILESGID=`id -g vpopmail`
> MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
> SPAMDYKE="/usr/bin/spamdyke"
> SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
> SMTPD="/var/qmail/bin/qmail-smtpd"
> TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
> HOSTNAME=`hostname`
> VCHKPW="/home/vpopmail/bin/vchkpw"
> REQUIRE_AUTH=0
>
> exec /usr/bin/softlimit -m 6400 \
>  /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
>  -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>  $SPAMDYKE --config-file $SPAMDYKE_CONF \
>  $SMTPD $VCHKPW /bin/true 2>&1
>
>
>
>
> On Tue, Feb 14, 2017 at 9:52 AM, CarlC Internet Services Service Desk <
> ab...@carlc.com> wrote:
>
>> Chris,
>>
>> I loaded a stock QMT install, and in /var/qmail/supervise/smtp/run, it
>> has the line:
>>
>> BLACKLIST=`cat /var/qmail/control/blacklists`
>>
>> Which is used by SMTP before SPAMDYKE is called:
>>
>> exec /usr/bin/softlimit -m 6400 \
>>  /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
>>  -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>>  $RBLSMTPD $BLACKLIST \
>>  $SPAMDYKE --config-file $SPAMDYKE_CONF \
>>  $SMTPD $VCHKPW /bin/true 2>&1
>>
>> I would think you could use either blacklists in /var/qmail/control/ or
>> the spamdyke config. Either should work... Using RBL to block it might be
>> faster/less load on the server than waiting for SpamDyke to startup, but
>> either way will work.
>>
>> And for blacklist in /var/qmail/control/blacklists, mine is:
>>
>> -r b.barracudacentral.org -r bl.spamcop.net -r zen.spamhaus.org
>> -r cbl.abuseat.org -r dul.dnsbl.sorbs.net
>>
>> Note: to use barracudacentral, you must sign up with them and give them
>> your IP address to allow access. So don't Copy/Paste this unless you're
>> signed up with barracuda. It is free, and barracuda only blocks KNOWN/HARD
>> spammers.
>>
>> In either case, you would see the blocks in the
>> /var/log/qmail/smtp/current [or other files in that area].
>>
>> Carl
>>
>>
>> -
>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>>
>>
>
> --
> Eric Broch, IMSO, DAM, NGOO, DITH, URTS
> White Horse Technical Consulting (WHTC)
>
>

Re: [qmailtoaster] Validating RBLs are in use

[Eric Broch]

It's the same as my centos 6 run scripts, in fact that's where I got the 
original src rpms for centos 7. I think Eric Shubert had spamdyke in mind.



On 2/15/2017 1:26 PM, Chris wrote:
I gotta ask, while you said this was a stock QMT install, when was it 
built?


I literally, in the last twenty minutes, spun up a new CentOS 7 VM, 
and installed QMT via the instructions and scripts from 
http://www.qmailtoaster.com/, and I have a different 
/var/qmail/supervise/smtp/run from you:


#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1




On Tue, Feb 14, 2017 at 9:52 AM, CarlC Internet Services Service Desk 
> wrote:


Chris,

I loaded a stock QMT install, and in
/var/qmail/supervise/smtp/run, it has the line:

BLACKLIST=`cat /var/qmail/control/blacklists`

Which is used by SMTP before SPAMDYKE is called:

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c
"$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $RBLSMTPD $BLACKLIST \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1

I would think you could use either blacklists in
/var/qmail/control/ or the spamdyke config. Either should work...
Using RBL to block it might be faster/less load on the server than
waiting for SpamDyke to startup, but either way will work.

And for blacklist in /var/qmail/control/blacklists, mine is:

-r b.barracudacentral.org 
-r bl.spamcop.net  -r zen.spamhaus.org
 -r cbl.abuseat.org
 -r dul.dnsbl.sorbs.net


Note: to use barracudacentral, you must sign up with them and give
them your IP address to allow access. So don't Copy/Paste this
unless you're signed up with barracuda. It is free, and barracuda
only blocks KNOWN/HARD spammers.

In either case, you would see the blocks in the
/var/log/qmail/smtp/current [or other files in that area].

Carl


-
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com





--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)

Re: [qmailtoaster] Validating RBLs are in use

[Chris]

I gotta ask, while you said this was a stock QMT install, when was it built?

I literally, in the last twenty minutes, spun up a new CentOS 7 VM, and
installed QMT via the instructions and scripts from
http://www.qmailtoaster.com/, and I have a different
/var/qmail/supervise/smtp/run from you:

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1




On Tue, Feb 14, 2017 at 9:52 AM, CarlC Internet Services Service Desk <
ab...@carlc.com> wrote:

> Chris,
>
> I loaded a stock QMT install, and in /var/qmail/supervise/smtp/run, it has
> the line:
>
> BLACKLIST=`cat /var/qmail/control/blacklists`
>
> Which is used by SMTP before SPAMDYKE is called:
>
> exec /usr/bin/softlimit -m 6400 \
>  /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
>  -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
>  $RBLSMTPD $BLACKLIST \
>  $SPAMDYKE --config-file $SPAMDYKE_CONF \
>  $SMTPD $VCHKPW /bin/true 2>&1
>
> I would think you could use either blacklists in /var/qmail/control/ or
> the spamdyke config. Either should work... Using RBL to block it might be
> faster/less load on the server than waiting for SpamDyke to startup, but
> either way will work.
>
> And for blacklist in /var/qmail/control/blacklists, mine is:
>
> -r b.barracudacentral.org -r bl.spamcop.net -r zen.spamhaus.org
> -r cbl.abuseat.org -r dul.dnsbl.sorbs.net
>
> Note: to use barracudacentral, you must sign up with them and give them
> your IP address to allow access. So don't Copy/Paste this unless you're
> signed up with barracuda. It is free, and barracuda only blocks KNOWN/HARD
> spammers.
>
> In either case, you would see the blocks in the
> /var/log/qmail/smtp/current [or other files in that area].
>
> Carl
>
>
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>
>

RE: [qmailtoaster] Validating RBLs are in use

[CarlC Internet Services Service Desk]

Chris,

I loaded a stock QMT install, and in /var/qmail/supervise/smtp/run, it has the 
line:

BLACKLIST=`cat /var/qmail/control/blacklists`

Which is used by SMTP before SPAMDYKE is called:

exec /usr/bin/softlimit -m 6400 \
 /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
 $RBLSMTPD $BLACKLIST \
 $SPAMDYKE --config-file $SPAMDYKE_CONF \
 $SMTPD $VCHKPW /bin/true 2>&1

I would think you could use either blacklists in /var/qmail/control/ or the 
spamdyke config. Either should work... Using RBL to block it might be 
faster/less load on the server than waiting for SpamDyke to startup, but either 
way will work.

And for blacklist in /var/qmail/control/blacklists, mine is:

-r b.barracudacentral.org -r bl.spamcop.net -r zen.spamhaus.org -r 
cbl.abuseat.org -r dul.dnsbl.sorbs.net

Note: to use barracudacentral, you must sign up with them and give them your IP 
address to allow access. So don't Copy/Paste this unless you're signed up with 
barracuda. It is free, and barracuda only blocks KNOWN/HARD spammers.

In either case, you would see the blocks in the /var/log/qmail/smtp/current [or 
other files in that area].

Carl


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Validating RBLs are in use

[South Computers]

It does take over the function, but to the best of my knowledge is 
doesn't replace it in the stock install of qmt, unless things have 
changed. As far as I know, Spamdyke has to be installed on it's own. 
Hopefully someone will correct me if I'm wrong, haven't kept up with 
things the last couple of years. I take it your toaster is working as 
expected?




Chris wrote:

Oh!  So spamdyke has replaced the old blacklists config?

So, the wiki page on RBLs should probably point to 
http://wiki.qmailtoaster.net/index.php/Spamdyke and the entry on RBLs 
on the Spamdyke page should have 'check-dnsrbl' swapped out for 
'dns-blacklist-entry' as it looks like the name of that parameter has 
changed.


Thank you very much!

-Chris

On Mon, Feb 13, 2017 at 3:05 PM, South Computers 
> wrote:


That's where is is on my centos 5 boxes, haven't upgraded them
just yet.

But it's irrelevant if you are running spamdyke, as blocklists are
configured within spamdyke directly if you have it installed.

Not sure if there's an easier way, but I just do a tail -n 100
/var/log/qmail/smtp/current  or whatever number of lines you want
to see, and look for it.

You could also do tail -n 100 /var/log/qmail/smtp/current |grep
spamhaus

or similar.



Chris wrote:

I followed the instructions at
http://wiki.qmailtoaster.com/index.php/RBLs
 for adding
RBLs.   There wasn't a file named
/var/qmail/control/blacklists with a default of '-r
sbl.spamhaus.org 
' but I went ahead and created it
with the content '-r zen.spamhaus.org
  -r
list.dsbl.org   -r
combined.njabl.org 
'

Is there a way to validate that qmail is now using these entries?

Where is /var/qmail/control/blacklists referenced in the configs?

Thanks!

-Chris*
*



-
To unsubscribe, e-mail:
qmailtoaster-list-unsubscr...@qmailtoaster.com

For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com






-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Validating RBLs are in use

[Chris]

Oh!  So spamdyke has replaced the old blacklists config?

So, the wiki page on RBLs should probably point to
http://wiki.qmailtoaster.net/index.php/Spamdyke and the entry on RBLs on
the Spamdyke page should have 'check-dnsrbl' swapped out for
'dns-blacklist-entry' as it looks like the name of that parameter has
changed.

Thank you very much!

-Chris

On Mon, Feb 13, 2017 at 3:05 PM, South Computers 
wrote:

> That's where is is on my centos 5 boxes, haven't upgraded them just yet.
>
> But it's irrelevant if you are running spamdyke, as blocklists are
> configured within spamdyke directly if you have it installed.
>
> Not sure if there's an easier way, but I just do a tail -n 100
> /var/log/qmail/smtp/current  or whatever number of lines you want to see,
> and look for it.
>
> You could also do tail -n 100 /var/log/qmail/smtp/current |grep spamhaus
>
> or similar.
>
>
>
> Chris wrote:
>
>> I followed the instructions at http://wiki.qmailtoaster.com/i
>> ndex.php/RBLs for adding RBLs.   There wasn't a file named
>> /var/qmail/control/blacklists with a default of '-r sbl.spamhaus.org <
>> http://sbl.spamhaus.org>' but I went ahead and created it with the
>> content '-r zen.spamhaus.org  -r list.dsbl.org <
>> http://list.dsbl.org> -r combined.njabl.org '
>>
>> Is there a way to validate that qmail is now using these entries?
>>
>> Where is /var/qmail/control/blacklists referenced in the configs?
>>
>> Thanks!
>>
>> -Chris*
>> *
>>
>
>
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
>
>

Re: [qmailtoaster] Validating RBLs are in use

[Chris]

On Mon, Feb 13, 2017 at 2:38 PM, Eric Broch  wrote:

> Right off the top, what OS are you using?
>

CentOS Linux release 7.3.1611 (Core)



> I'm not sure why you wouldn't have a blacklists file.
>


Built a clean qmailtoaster on 1/29 using the docs on the site and the
install tools downloaded on that date.


Just to validate I didn't bork my first install, I just now spun up a clean
C7 VM, and installed qmailtoaster on it. After a clean install, no
blacklists file:

[root@mailtest ~]# find / -name blacklists
[root@mailtest ~]#


-Chris

Re: [qmailtoaster] Validating RBLs are in use

[South Computers]

That's where is is on my centos 5 boxes, haven't upgraded them just yet.

But it's irrelevant if you are running spamdyke, as blocklists are 
configured within spamdyke directly if you have it installed.


Not sure if there's an easier way, but I just do a tail -n 100 
/var/log/qmail/smtp/current  or whatever number of lines you want to 
see, and look for it.


You could also do tail -n 100 /var/log/qmail/smtp/current |grep spamhaus

or similar.



Chris wrote:
I followed the instructions at 
http://wiki.qmailtoaster.com/index.php/RBLs for adding RBLs.   There 
wasn't a file named /var/qmail/control/blacklists with a default of 
'-r sbl.spamhaus.org ' but I went ahead and 
created it with the content '-r zen.spamhaus.org 
 -r list.dsbl.org  -r 
combined.njabl.org '


Is there a way to validate that qmail is now using these entries?

Where is /var/qmail/control/blacklists referenced in the configs?

Thanks!

-Chris*
*



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Validating RBLs are in use

[Eric Broch]

Right off the top, what OS are you using? I'm not sure why you wouldn't 
have a blacklists file.


On 2/13/2017 3:10 PM, Chris wrote:
I followed the instructions at 
http://wiki.qmailtoaster.com/index.php/RBLs for adding RBLs.   There 
wasn't a file named /var/qmail/control/blacklists with a default of 
'-r sbl.spamhaus.org ' but I went ahead and 
created it with the content '-r zen.spamhaus.org 
 -r list.dsbl.org  -r 
combined.njabl.org '


Is there a way to validate that qmail is now using these entries?

Where is /var/qmail/control/blacklists referenced in the configs?

Thanks!

-Chris*
*


--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)