Re: spamd-setup hangup/timeout settings

2008-01-08 Thread Jason George
>>> My spamd-setup always takes 20-30 minutes on two servers (4.1 and 4.2). >>> This is not normal? When I run it manually; most of the time is >>> spent >>> downloading traplist.gz >>> >>> This morning, I changed the crontab "time /usr

Re: spamd-setup hangup/timeout settings

2008-01-08 Thread Frank Bax
Florian Fuessl wrote: Frank Bax wrote: My spamd-setup always takes 20-30 minutes on two servers (4.1 and 4.2). This is not normal? When I run it manually; most of the time is spent downloading traplist.gz This morning, I changed the crontab "time /usr/libexec/spamd-setup -d" 4.

Re: spamd-setup hangup/timeout settings

2008-01-07 Thread Florian Fuessl
Frank Bax wrote: > > My spamd-setup always takes 20-30 minutes on two servers (4.1 and 4.2). > This is not normal? When I run it manually; most of the time is > spent > downloading traplist.gz > > This morning, I changed the crontab "time /usr/libexec/spamd-s

Re: Need peer review of my pf/spamd config

2008-01-07 Thread Jason McIntyre
On Mon, Jan 07, 2008 at 01:26:07AM -0800, Robert Carr wrote: > > /var/log/spamd shows activity of hosts being > grey-trapped, marked as (BLACK) or (GREY); spamdb > shows trapped and white hosts. > > However, 'pfctl -t spamd -T show' shows nothing in the > t

Re: Need peer review of my pf/spamd config

2008-01-07 Thread Stuart Henderson
On 2008/01/07 01:26, Robert Carr wrote: > However, 'pfctl -t spamd -T show' shows nothing in the > table That's normal for 4.2 (unless you use spamd's blacklist-only mode)

Need peer review of my pf/spamd config

2008-01-07 Thread Robert Carr
I think my pf / spamd config is correct and running well, but I'm not entirely sure and would appreciate any suggestions, corrections or optimizations. /var/log/spamd shows activity of hosts being grey-trapped, marked as (BLACK) or (GREY); spamdb shows trapped and white hosts. However, &

Re: spamd-setup hangup/timeout settings

2008-01-06 Thread Peter N. M. Hansteen
Frank Bax <[EMAIL PROTECTED]> writes: > My spamd-setup always takes 20-30 minutes on two servers (4.1 and > 4.2). This is not normal? When I run it manually; most of the time is > spent downloading traplist.gz I guess I must stop complaining about my line speeds, then. My sol

Re: spamd-setup hangup/timeout settings

2008-01-06 Thread Frank Bax
Florian Fuessl wrote: I'm running spamd-setup via regular cronjob every 20 minutes. Sometimes the spamd-setup process seems to hang and does not finish within this period, although all black- and whitelists are local files. Is there a way define timeouts for tasks of spamd-setup? What sol

Re: spamd-setup hangup/timeout settings

2008-01-06 Thread Florian Fuessl
"Peter N. M. Hansteen" <[EMAIL PROTECTED]> wrote: > >> I'm running spamd-setup via regular cronjob every 20 minutes. Sometimes the >> spamd-setup process seems to hang and does not finish within this period, >> although all black- and whitelists are loca

Re: spamd-setup hangup/timeout settings

2008-01-06 Thread Peter N. M. Hansteen
"Florian Fuessl" <[EMAIL PROTECTED]> writes: > I'm running spamd-setup via regular cronjob every 20 minutes. Sometimes the > spamd-setup process seems to hang and does not finish within this period, > although all black- and whitelists are local files. I would try

spamd-setup hangup/timeout settings

2008-01-06 Thread Florian Fuessl
Hi, I'm running spamd-setup via regular cronjob every 20 minutes. Sometimes the spamd-setup process seems to hang and does not finish within this period, although all black- and whitelists are local files. Is there a way define timeouts for tasks of spamd-setup? What solution is recommende

Re: legitimate mail messages passing through SPAMD

2007-12-22 Thread Vijay Sankar
On December 22, 2007 05:47:56 am Jeff Santos wrote: > Hi, > > I posted a question earlier, but I guess I was not clear. > > I have a firewall running OpenBSD 4.2 and SPAMD to block spams. > I would like to know how many legitimate email messages SPAMD > is letting in. The def

legitimate mail messages passing through SPAMD

2007-12-22 Thread Jeff Santos
Hi, I posted a question earlier, but I guess I was not clear. I have a firewall running OpenBSD 4.2 and SPAMD to block spams. I would like to know how many legitimate email messages SPAMD is letting in. The default spamd setup that comes in pf.conf is no rdr on $ext_if proto tcp from to any

SPAMD legitimate mail statistics

2007-12-21 Thread Jeff Santos
Hi, Is it possible to know how many SMTP legitimate SMTP connections have passed through SPAMD? In a setup like, no rdr on $ext_if proto tcp from to any port smtp rdr pass on $ext_if proto tcp from any to any port smtp \ -> 127.0.0.1 port spamd Can I assume the number of evaluations

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Renaud Allard
o-quick-answer ;P No problem. The firewall admin told me he was blocking packets from 127.0.0.1 originating from the antispam servers. > > | I doubt it. In general (the recommended setup), pf redirects incoming > | requests to 127.0.0.1:8025, the port where spamd is listening *on > | loca

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Paul de Weerd
setup), pf redirects incoming | requests to 127.0.0.1:8025, the port where spamd is listening *on | localhost*. Replies such as ACK's etc. *MUST* originate from | 127.0.0.1:8025 in this case. PF will take care of rewriting the packet | to the address the client originally used to contact

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Paul de Weerd
On Mon, Dec 10, 2007 at 04:24:03PM +0100, Renaud Allard wrote: | Peter N. M. Hansteen wrote: | > Renaud Allard <[EMAIL PROTECTED]> writes: | > | >> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP | >> of the sender when it hits the greytr

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Peter N. M. Hansteen
. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Renaud Allard
Peter N. M. Hansteen wrote: > Renaud Allard <[EMAIL PROTECTED]> writes: > >> I just noticed that spamd is trying to send ack packets from 127.0.0.1 to >> the IP >> of the sender when it hits the greytrap IP. I don't feel this is wanted >> behavior. H

Re: Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Peter N. M. Hansteen
Renaud Allard <[EMAIL PROTECTED]> writes: > I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the > IP > of the sender when it hits the greytrap IP. I don't feel this is wanted > behavior. Has anymone any idea of why it is doing so? ACK packets

Spamd sending packets from 127.0.0.1 to the outside?

2007-12-10 Thread Renaud Allard
Hello, I am running OpenBSD 4.2-stable I just noticed that spamd is trying to send ack packets from 127.0.0.1 to the IP of the sender when it hits the greytrap IP. I don't feel this is wanted behavior. Has anymone any idea of why it is doing so? It doesn't seem to be due to the "

Note on "pfctl: cannot allocate memory" from spamd-setup

2007-12-06 Thread Steve Shockley
I'm running spamd in blacklist mode, and it started running out of memory today. It turns out the lists are getting close to the default limit: # /usr/libexec/spamd-setup -b -d Getting http://www.openbsd.org/spamd/traplist.gz blacklist uatraps 157348 entries Getting http://www.openbs

Re: spamd DB_SCAN_INTERVAL

2007-12-03 Thread Bob Beck
* Tom Bombadil <[EMAIL PROTECTED]> [2007-08-31 12:21]: > > Probably Bad things. > > Oh-oh... I increased it to 2 minutes. Thing are a bit better now. > > > Shouldn't be. What rev of openbsd are you running this spamd box on? > > I run it on a sing

Re: spamd: sync and db backup/restore

2007-10-17 Thread Theo de Raadt
> > Just copy /var/db/spamd from the old to the new host, so you get all other > > information as well (WHITE, SPAMTRAP, GREY, expire records). > > > Can i reliably copy /var/db/spamd while spamd/spamlogd are still running > or must they be stopped first? The code sync&#

Re: spamd: sync and db backup/restore

2007-10-17 Thread Heinrich Rebehn
Olli Hauer wrote: Jacob Yocom-Piatt wrote: swapped out a spamd host last night and ended up doing some ksh scripting to get the spamdb up to date on the new machine. also have connected the old host with the new one using the sync (-y & -Y) options for spamd and spamlogd, and these opt

spamd-setup and CBL list chokes on 5million+ address files

2007-10-13 Thread Paul Pruett
FYI - limits on spamd-setup when importing blacklists Playing around with 4.2, and although spamd in grey mode no longer uses table, it still choked with a 'malloc' error when I used the CBL list as a file in /etc/mail/spamd.conf Since the CBL list is over 5 million lines, I use

Re: spamd shows up as an open relay

2007-09-26 Thread Bob Beck
> I'm not 100% certain I'm "get"ting your idea here ... we do currently > run inbound/outbound mail on different IPs, but the problem isn't with > the connections themselves. > > From the example session transcript with spamd that I posted earlier: &g

Re: spamd shows up as an open relay

2007-09-26 Thread frantisek holop
hmm, on Wed, Sep 26, 2007 at 11:22:23AM +0200, frantisek holop said that > dnsstuff.com is great to have a look what an admin > left out/forgot/doesn't know :D > > i was quite dismayed too when it showed me as an open relay... > (http://www.dnsstuff.com/tools/dnsreport.ch?domain=obiit.org) sorry,

Re: spamd shows up as an open relay

2007-09-26 Thread frantisek holop
hmm, on Tue, Sep 25, 2007 at 02:50:41PM -0700, Rob said that > We just ran across an odd intermittent problem with email that we > traced back to spamd showing up as an open relay. I double-checked the > documentation and mailing list archives and didn't find anything > relevant.

Re: spamd shows up as an open relay

2007-09-26 Thread Craig Skinner
Rob wrote: You're right, then. If I explicitly block inbound connections to the outbound mail server (instead of redirecting them), that might fix the problem ... depending on just what kind of check the recipient's mail server is doing. A sending MTA is not required to accept SMTP connections

Re: spamd shows up as an open relay

2007-09-25 Thread Lars Hansson
On 9/26/07, Rob <[EMAIL PROTECTED]> wrote: > Yeah, I agree. It's the wrong way for them to check for an open relay, > but it is still causing a bit of a problem. Well if it is actually caused by spamd you have 2 options: a) not run spamd. b) ask them to get their shit toget

Re: spamd shows up as an open relay

2007-09-25 Thread Rob
e recipient's mail server. The problem is, if the recipient's mail server is performing an on-the-fly check, then its connection back to our outbound mail server would automatically be redirected to our inbound mail server, which gets intercepted by spamd, which appears to be the open relay. You&#

Re: spamd shows up as an open relay

2007-09-25 Thread Stuart Henderson
On 2007/09/25 17:35, Rob wrote: > Since this is happening during the conversation with our inbound mail > server, I don't see how filtering connections between our inbound and > outbound mail servers would fix it. >From what you say, it sounds like your outbound mail server sends mail to some host

Re: spamd shows up as an open relay

2007-09-25 Thread Rob
I'm not 100% certain I'm "get"ting your idea here ... we do currently run inbound/outbound mail on different IPs, but the problem isn't with the connections themselves. >From the example session transcript with spamd that I posted earlier: 250 Hello, spam sender. Ple

Re: spamd shows up as an open relay

2007-09-25 Thread Stuart Henderson
On 2007/09/25 14:50, Rob wrote: > > Is there some configuration for spamd that I've missed You could run inbound and outbound email on different IP addresses, and don't accept incoming port 25 connections on the address used as a source for outgoing mail.

Re: spamd shows up as an open relay

2007-09-25 Thread Rob
Hi Jeremy, On 9/25/07, Jeremy C. Reed <[EMAIL PROTECTED]> wrote: > On Tue, 25 Sep 2007, Rob wrote: > > > We just ran across an odd intermittent problem with email that we > > traced back to spamd showing up as an open relay. I double-checked the > > documentation

Re: spamd shows up as an open relay

2007-09-25 Thread Jeremy C. Reed
On Tue, 25 Sep 2007, Rob wrote: > We just ran across an odd intermittent problem with email that we > traced back to spamd showing up as an open relay. I double-checked the > documentation and mailing list archives and didn't find anything > relevant. Please let us know

spamd shows up as an open relay

2007-09-25 Thread Rob
Hey guys, We just ran across an odd intermittent problem with email that we traced back to spamd showing up as an open relay. I double-checked the documentation and mailing list archives and didn't find anything relevant. Our mail server is bara.nccn.net, 12.165.58.50. There is a bump-i

Re: another spamd-setup question

2007-09-19 Thread Juan Miscaro
--- Mike Erdely <[EMAIL PROTECTED]> wrote: > On Wed, Sep 19, 2007 at 06:16:32PM -0400, Juan Miscaro wrote: > > I tried it but whenever I include the larger 'uatraps' I get: > > > > pfctl: Cannot allocate memory. > > > > I have plenty of free memory and cpu. Not sure why it's breaking > up. >

Re: another spamd-setup question

2007-09-19 Thread Stuart Henderson
On 2007/09/19 18:16, Juan Miscaro wrote: > I tried it but whenever I include the larger 'uatraps' I get: > pfctl: Cannot allocate memory. use 4.1 or newer spamd, don't use "blacklist only" mode.

Re: another spamd-setup question

2007-09-19 Thread Mike Erdely
On Wed, Sep 19, 2007 at 06:16:32PM -0400, Juan Miscaro wrote: > I tried it but whenever I include the larger 'uatraps' I get: > > pfctl: Cannot allocate memory. > > I have plenty of free memory and cpu. Not sure why it's breaking up. man pf.conf(5). look for table-entries -ME

Re: another spamd-setup question

2007-09-19 Thread Daniel Ouellet
Juan Miscaro wrote: I tried it but whenever I include the larger 'uatraps' I get: Look at set limit table-entries. man pf

Re: another spamd-setup question

2007-09-19 Thread Juan Miscaro
--- Bob Beck <[EMAIL PROTECTED]> wrote: > spews has been dead for a while. this is why with > recent releases of openbsd, we don't include it in the example > files anymore - spews started taking a tack of basically > including every ISP on the planet, since only big companies > should be ab

Re: another spamd-setup question

2007-09-19 Thread Peter N. M. Hansteen
e able to communicate with the people who built my laptop! - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: another spamd-setup question

2007-09-19 Thread Bob Beck
years ago, but IMO, now most of the world is numb to them, not just China and Korea. -Bob * Peter N. M. Hansteen <[EMAIL PROTECTED]> [2007-09-19 11:53]: > Juan Miscaro <[EMAIL PROTECTED]> writes: > > > http://www.openbsd.org/spamd/spews_list_level1.txt.g

Re: another spamd-setup question

2007-09-19 Thread Peter N. M. Hansteen
Juan Miscaro <[EMAIL PROTECTED]> writes: > http://www.openbsd.org/spamd/spews_list_level1.txt.gz Fetching that one with wget gets me a file with its timestamp in February, which probably means that it's no longer maintained and by now it's useless: $ ls -l *txt.gz -rw-r--

Re: another spamd-setup question

2007-09-19 Thread Juan Miscaro
--- Darrin Chandler <[EMAIL PROTECTED]> wrote: > On Wed, Sep 19, 2007 at 10:50:17AM -0400, Juan Miscaro wrote: > > I'm running OpenBSD 4.0 and I'm having trouble loading my spamd > > blacklist table with spamd-setup: > > > > $ sudo pfctl -t spamd -T sh

Re: another spamd-setup question

2007-09-19 Thread Darrin Chandler
On Wed, Sep 19, 2007 at 10:50:17AM -0400, Juan Miscaro wrote: > I'm running OpenBSD 4.0 and I'm having trouble loading my spamd > blacklist table with spamd-setup: > > $ sudo pfctl -t spamd -T show | wc -l > 7070 > $ sudo /usr/libexec/spamd-setup -d > Getti

another spamd-setup question

2007-09-19 Thread Juan Miscaro
I'm running OpenBSD 4.0 and I'm having trouble loading my spamd blacklist table with spamd-setup: $ sudo pfctl -t spamd -T show | wc -l 7070 $ sudo pfctl -t spamd -T flush 7070 addresses deleted. $ sudo pfctl -t spamd -T show | wc -l 0 $ sudo /usr/libexec/spamd-setup

Re: question on spamd blacklisted hosts

2007-09-18 Thread Juan Miscaro
--- Darrin Chandler <[EMAIL PROTECTED]> wrote: > On Tue, Sep 18, 2007 at 09:09:24PM +0100, Stuart Henderson wrote: > > On 2007/09/18 13:48, Juan Miscaro wrote: > > > I _am_ using blacklists with spamd-setup and I _did_ check the > > > blacklisted hosts imm

Re: question on spamd blacklisted hosts

2007-09-18 Thread Stuart Henderson
On 2007/09/18 13:48, Juan Miscaro wrote: > I _am_ using blacklists with spamd-setup and I _did_ check the > blacklisted hosts immediately after seeing the message. Perhaps my > command is messed up: > > sudo pfctl -t spamd -T show | grep 65.216.123.37 yes, most blacklists use cidr prefixes.

Re: question on spamd blacklisted hosts

2007-09-18 Thread Darrin Chandler
On Tue, Sep 18, 2007 at 09:09:24PM +0100, Stuart Henderson wrote: > On 2007/09/18 13:48, Juan Miscaro wrote: > > I _am_ using blacklists with spamd-setup and I _did_ check the > > blacklisted hosts immediately after seeing the message. Perhaps my > > command is messed up: &

Re: question on spamd blacklisted hosts

2007-09-18 Thread Juan Miscaro
--- Darrin Chandler <[EMAIL PROTECTED]> wrote: > On Tue, Sep 18, 2007 at 10:30:45AM -0400, Juan Miscaro wrote: > > { This is a resend. No replies after 24 hours } > > > > Running OBSD 4.0 here. > > > > I was under the impression that spamd only did gre

Re: question on spamd blacklisted hosts

2007-09-18 Thread Juan Miscaro
--- Jacob Yocom-Piatt <[EMAIL PROTECTED]> wrote: > Juan Miscaro wrote: > > { This is a resend. No replies after 24 hours } > > > > Running OBSD 4.0 here. > > > > I was under the impression that spamd only did greylisting and > dynamic > > whitel

Re: question on spamd blacklisted hosts

2007-09-18 Thread Juan Miscaro
--- "Peter N. M. Hansteen" <[EMAIL PROTECTED]> wrote: > Juan Miscaro <[EMAIL PROTECTED]> writes: > > > { This is a resend. No replies after 24 hours } > > That could have been due to too little information. > > > Running OBSD 4.0 here. >

Re: question on spamd blacklisted hosts

2007-09-18 Thread Peter N. M. Hansteen
Juan Miscaro <[EMAIL PROTECTED]> writes: > { This is a resend. No replies after 24 hours } That could have been due to too little information. > Running OBSD 4.0 here. > > I was under the impression that spamd only did greylisting and dynamic > whitelisting. Static black

Re: question on spamd blacklisted hosts

2007-09-18 Thread Darrin Chandler
On Tue, Sep 18, 2007 at 10:30:45AM -0400, Juan Miscaro wrote: > { This is a resend. No replies after 24 hours } > > Running OBSD 4.0 here. > > I was under the impression that spamd only did greylisting and dynamic > whitelisting. Static blacklisting available via spamd-s

Re: question on spamd blacklisted hosts

2007-09-18 Thread Jacob Yocom-Piatt
Juan Miscaro wrote: { This is a resend. No replies after 24 hours } Running OBSD 4.0 here. I was under the impression that spamd only did greylisting and dynamic whitelisting. Static blacklisting available via spamd-setup (and pseudo-whitelisting; of some of those blacklisted hosts). But

question on spamd blacklisted hosts

2007-09-18 Thread Juan Miscaro
{ This is a resend. No replies after 24 hours } Running OBSD 4.0 here. I was under the impression that spamd only did greylisting and dynamic whitelisting. Static blacklisting available via spamd-setup (and pseudo-whitelisting; of some of those blacklisted hosts). But not dynamic blacklisting

question on spamd blacklisted hosts

2007-09-17 Thread Juan Miscaro
Running OBSD 4.0 here. I was under the impression that spamd only did greylisting and dynamic whitelisting. Static blacklisting available via spamd-setup (and pseudo-whitelisting; of some of those blacklisted hosts). But not dynamic blacklisting. I occasionally get log messages like: spamd

Re: lost whitelisted hosts with spamd

2007-09-13 Thread Juan Miscaro
check your pf rules. > > > * Juan Miscaro <[EMAIL PROTECTED]> [2007-09-13 09:38]: > > My OpenBSD 4.0 mail filter (running amavisd-new) has been up and > > running well for 70 days. I received a complaint of delays this > > morning. Indeed, I see that servers which ha

Re: lost whitelisted hosts with spamd

2007-09-13 Thread Darrin Chandler
On Thu, Sep 13, 2007 at 10:29:02AM -0400, Juan Miscaro wrote: > My OpenBSD 4.0 mail filter (running amavisd-new) has been up and > running well for 70 days. I received a complaint of delays this > morning. Indeed, I see that servers which had been whitelisted by > spamd were no l

Re: lost whitelisted hosts with spamd

2007-09-13 Thread Bob Beck
ail filter (running amavisd-new) has been up and > running well for 70 days. I received a complaint of delays this > morning. Indeed, I see that servers which had been whitelisted by > spamd were no longer so. I verified that spamlogd is still running. > Does anyone have any ide

Re: lost whitelisted hosts with spamd

2007-09-13 Thread Peter N. M. Hansteen
Juan Miscaro <[EMAIL PROTECTED]> writes: > morning. Indeed, I see that servers which had been whitelisted by > spamd were no longer so. I verified that spamlogd is still running. > Does anyone have any ideas how this could have happened? Whitelist entries do expire after a

Re: lost whitelisted hosts with spamd

2007-09-13 Thread Craig Skinner
Juan Miscaro wrote: My OpenBSD 4.0 mail filter (running amavisd-new) has been up and running well for 70 days. I received a complaint of delays this morning. Indeed, I see that servers which had been whitelisted by spamd were no longer so. I verified that spamlogd is still running. Does

lost whitelisted hosts with spamd

2007-09-13 Thread Juan Miscaro
My OpenBSD 4.0 mail filter (running amavisd-new) has been up and running well for 70 days. I received a complaint of delays this morning. Indeed, I see that servers which had been whitelisted by spamd were no longer so. I verified that spamlogd is still running. Does anyone have any ideas how

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread Marco S Hyman
snowcrash+openbsd writes: > > You've got the source. Why not read it and figure out the answer for > yourself? > > Source being available is true for just about everything, now, isnt't it? Well, I see you quoted from a private message I sent, and a selected quote at that. While noting tha

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread snowcrash+openbsd
> You've got the source. Why not read it and figure out the answer for yourself? Source being available is true for just about everything, now, isnt't it? Surprising, then, that people ask questions ... Thanks for all the advice to use my MTA, everyone! The pissy off-list insults are a nice t

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread Bob Beck
* snowcrash+openbsd <[EMAIL PROTECTED]> [2007-09-11 11:41]: > hi, > > > it does this offline after one delay > > well, fair enough, then. > > what, then, is the MINIMUM value of that delay? > > "1 minute" is obviouly OK. Nope, because it's up to the client (the other end) how fast he r

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread snowcrash+openbsd
> You *do* understand that the second attempt can occur at any random time > of the sending MTA's choice, or even never? Yes. Irrelevant. I'm asking about spamd's behavior. Not the sender's. > Just use your MTA's built-in features. One can do EVERYTHING sp

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread Joachim Schipper
On Tue, Sep 11, 2007 at 10:31:31AM -0700, snowcrash+openbsd wrote: > > it does this offline after one delay > > well, fair enough, then. > > what, then, is the MINIMUM value of that delay? > > "1 minute" is obviouly OK. > > *is* zero delay "code functional" (does it *break* anything)? i.e., >

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread snowcrash+openbsd
hi, > it does this offline after one delay well, fair enough, then. what, then, is the MINIMUM value of that delay? "1 minute" is obviouly OK. *is* zero delay "code functional" (does it *break* anything)? i.e., the second attempt (after one "zero" delay ...) is passed? afaict, delays in seco

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread Bob Beck
> My question is about using spamd to GREYTRAP, but not GREYLIST. > spamd doesn't do that. because it needs to look at the address in order to trap. it does this offline after one delay. It is not written to do instantaneous type trapping, because your MTA can do that. -Bob

Re: using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-11 Thread snowcrash+openbsd
hi, > No, that's not what passtime means, and not how spamd works either. > (Read the man page for details; i did read the manual. and have questions. which is why i'm here. > passtime has to do with the time between subsequent connects, *PER* the manual, "After p

using spamd to grey-TRAP *only*, with *no* grey-LIST delays, stutters, etc ?

2007-09-08 Thread snowcrash+openbsd
hi, i'd like to use 'spamd' for GREYTRAPPING only, with NO delay-via-GREYLISTING. i.e., other than mail to defined TRAPS and fully-blacklisted domains, no delay on inbound mmail. looking at config, i think i can achieve that by setting "passtime", via "-Gx:y:z&quo

Re: spamd: bogus size db entry - bad db file?

2007-09-05 Thread Jeremy C. Reed
On Wed, 5 Sep 2007, Alex Holst wrote: > If I wipe the db will spamd purge the spamd-white table? Yes. spamd will "replace" it with: pfctl -p /dev/pf -q -t spamd-white -T replace -f - Jeremy C. Reed

spamd: bogus size db entry - bad db file?

2007-09-05 Thread Alex Holst
]> WHITE|194.150.112.222|||1178785311|1178788495|1192114906|4|22 spamdb: bogus size db entry - bad db file? The db file is available for anyone who needs it to find the cause. Currently the spamd-white pf table contains 1302 entries which my mrtg graphs shows to be the number of entries before the db ki

Re: spamd DB_SCAN_INTERVAL

2007-08-31 Thread Tom Bombadil
> Probably Bad things. Oh-oh... I increased it to 2 minutes. Thing are a bit better now. > Shouldn't be. What rev of openbsd are you running this spamd box on? > I run it on a single ide drive, I'm probably bigger than your site. Really? We get mail for differen

Re: spamd DB_SCAN_INTERVAL

2007-08-30 Thread Bob Beck
* Tom Bombadil <[EMAIL PROTECTED]> [2007-08-30 13:56]: > Hi all... > > What happens if we change "#define DB_SCAN_INTERVAL 60" to 600 in > /usr/src/libexec/spamd/grey.h? > Probably Bad things. > Sorry, I'm no C coder... > > Basically we just

spamd DB_SCAN_INTERVAL

2007-08-30 Thread Tom Bombadil
Hi all... What happens if we change "#define DB_SCAN_INTERVAL 60" to 600 in /usr/src/libexec/spamd/grey.h? Sorry, I'm no C coder... Basically we just want to spread out table scans for now until we get new hardware in, because it's fairly heavy on an single IDE drive. D

Re: spamd: sync and db backup/restore

2007-08-21 Thread Olli Hauer
Jacob Yocom-Piatt wrote: Olli Hauer wrote: Jacob Yocom-Piatt wrote: swapped out a spamd host last night and ended up doing some ksh scripting to get the spamdb up to date on the new machine. also have connected the old host with the new one using the sync (-y & -Y) options for spamd

Re: spamd: sync and db backup/restore

2007-08-21 Thread Jacob Yocom-Piatt
Olli Hauer wrote: Jacob Yocom-Piatt wrote: swapped out a spamd host last night and ended up doing some ksh scripting to get the spamdb up to date on the new machine. also have connected the old host with the new one using the sync (-y & -Y) options for spamd and spamlogd, and these opt

Re: spamd: sync and db backup/restore

2007-08-21 Thread Olli Hauer
Jacob Yocom-Piatt wrote: swapped out a spamd host last night and ended up doing some ksh scripting to get the spamdb up to date on the new machine. also have connected the old host with the new one using the sync (-y & -Y) options for spamd and spamlogd, and these options are working fine

Re: spamd problems

2007-08-21 Thread Olli Hauer
Edgars MakEa wrote: Hi! Some days ago spamd just started to GREY all incoming connections even if IP address already was a WHITE. Any ideas for waht and where to look? OpenBSD 4.0 Generic those ar my firewall rules: rdr pass on $ext_if proto tcp from to port 25 \ -> 127.0.0.1 p

spamd: sync and db backup/restore

2007-08-19 Thread Jacob Yocom-Piatt
swapped out a spamd host last night and ended up doing some ksh scripting to get the spamdb up to date on the new machine. also have connected the old host with the new one using the sync (-y & -Y) options for spamd and spamlogd, and these options are working fine and are quite neat.

Re: spamd problems

2007-08-19 Thread Edgars Makņa
I didnt do anything, it just started do add all hosts as GREY. If i run spamd | grep xxx.yyy.zzz.ccc i have now two entries GREY and WHITE with same ip. those rdr rules i need to make a transparent spamd firewall for an mx server behind this router (i have real IP adresses not a NATted mx server

Re: spamd problems

2007-08-19 Thread Bill
On Sun, 19 Aug 2007 22:09:49 +0300 Edgars MakEa <[EMAIL PROTECTED]> spake: > Hi! > Some days ago spamd just started to GREY all incoming connections even > if IP address already was a WHITE. > Any ideas for waht and where to look? > > OpenBSD 4.0 Generic > those

spamd problems

2007-08-19 Thread Edgars Makņa
Hi! Some days ago spamd just started to GREY all incoming connections even if IP address already was a WHITE. Any ideas for waht and where to look? OpenBSD 4.0 Generic those ar my firewall rules: rdr pass on $ext_if proto tcp from to port 25 \ -> 127.0.0.1 port 8025 rdr pass on $ext

Re: spamd - 250 return text

2007-08-07 Thread stuart van Zee
; -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Tom Bombadil > Sent: Tuesday, August 07, 2007 02:37 PM > To: Peter Fraser > Cc: 'misc@openbsd.org' > Subject: Re: spamd - 250 return text > > > As far as I understand from th

Re: spamd - 250 return text

2007-08-07 Thread Tom Bombadil
As far as I understand from them, the sysadmin was showing the defer to his boss using a telnet session, and the boss got pissed off, because they are actually very diligent about their spam policies. Anyways, I just wanted to know if it there was another way to change the 250 messages without cha

Re: spamd - 250 return text

2007-08-05 Thread Lars Hansson
On 8/4/07, Tom Bombadil <[EMAIL PROTECTED]> wrote: > We've had a pretty hard time from a client saying how "rude" this > default message is. Even though their tech people didn't care, the > people higher up got really offended... Quite understandably I'd say, > since these "greetings" aren't really

Re: spamd - 250 return text

2007-08-04 Thread Peter Fraser
I think that the problem is a bad mail program at your clients, A user should not see the 250 status, it is not a failure of any sort but I have seen it as a return status sent to a user. Here is an example that I have seen from someone who sent us a message. The message failed and this is the sta

Re: spamd - 250 return text

2007-08-03 Thread Tom Bombadil
e Edition - with sudo > defaulting to !insults, apologies from spamd, and available on exclusive > gold CDs, it's yours for a bargain donation to the project of only > $5k... (-: I was in no way complaining about the outstanding work all the developers are doing, but since being called

Re: spamd - 250 return text

2007-08-03 Thread Lawrence Teo
Tom Bombadil wrote: Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for nothing. "man spamd" a

Re: spamd - 250 return text

2007-08-03 Thread Stuart Henderson
On 2007/08/03 13:59, Tom Bombadil wrote: > Short of recompiling spamd, is there any undocumented way of changing > the 250 responses from spamd? Editing the binary? (Is recompiling really so hard?) > Sorry to bug you guys with this lame "problem" but in the financial > wor

Re: spamd - 250 return text

2007-08-03 Thread Darren Spruell
On 8/3/07, Tom Bombadil <[EMAIL PROTECTED]> wrote: > Hi all, > > Short of recompiling spamd, is there any undocumented way of changing > the 250 responses from spamd? > > - 250 Hello, spam sender. Pleased to be wasting your time. > - 250 You are about to try to deli

Re: spamd - 250 return text

2007-08-03 Thread Marcus Watts
writes Tom Bombadil <[EMAIL PROTECTED]> > Subject: spamd - 250 return text ... > Short of recompiling spamd, is there any undocumented way of changing > the 250 responses from spamd? ... Sure. It's called "bvi". -Marcus Watts

spamd - 250 return text

2007-08-03 Thread Tom Bombadil
Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for nothing. "man spamd" and a quick search

Duplicate Host Tuples in SPAMD

2007-07-24 Thread Bharj, Gagandeep
Hello Folks, I'm running into an issue where a tuple gets white listed, but the next smtp connection results in 2 entries: one that is whitelisted and another one that is grey listed. Thus, the email is never sent. This doesn't happen for all emails, only for one, in particular. We have set our

Re: spamd question (4.1)

2007-07-24 Thread syl
sorry I make a mistake and send my mail at the wrong mailling list Le 24/07/07, syl<[EMAIL PROTECTED]> a icrit : qui ce devout pour faire le site car finalement le ror ca reste du web donc ca reste pas fait pour moi 2007/7/24, Stuart Henderson <[EMAIL PROTECTED]>: > On 2007/07/24 06:37, Jac

<    4   5   6   7   8   9   10   11   12   13   >