Re: [qmailtoaster] Re: QMT Best Practice DRAFT

2014-03-12 Thread Scot Needy
Need any testers let me know. I’m considering building a new toaster rather than moving my existing one outside. On Mar 12, 2014, at 12:43 PM, Eric Shubert wrote: > On 03/12/2014 07:43 AM, Scot Needy wrote: >> >> Feel free to comment update to delete. >> Maybe we can

[qmailtoaster] qmlog syntax ?

2014-03-12 Thread Scot Needy
That is wrong with this ? [BASH]# qmlog spamd -d 0311:1800-0311:1820 Gives me the entire day qmlog v0.3 - show current log of service 'service' usage: qmlog service [option] ... services: authlib clamd imap4 imap4-ssl pop3 pop3-ssl send smtp spamd submission options: -h[elp] this

Re: [qmailtoaster] More SPAM

2014-03-12 Thread Scot Needy
Yep spamd is running although I don’t see any denies. 03-12 10:24:02 Mar 12 10:24:02.712 [7620] info: prefork: child states: II 03-12 10:25:15 Mar 12 10:25:15.315 [7644] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 50874 03-12 10:25:15 Mar 12 10:25:15.319 [7644] info: s

[qmailtoaster] QMT Best Practice DRAFT

2014-03-12 Thread Scot Needy
Feel free to comment update to delete. Maybe we can make it worthy of the Wiki Here are tid bit’s I have picked up over the past few weeks. Implementation Host MUST be on a NAT or outside address where it can see the real IP address of the last hop. Internet facing Reverse DNS on your hostnam

Re: [qmailtoaster] More SPAM

2014-03-12 Thread Scot Needy
. QMAILQUEUE=""/var/qmail/bin/simscan” NOTE: you cannot have a trailing : on /var/qmail/control/simcontrol "attach=.exe:.pif:.src:" = All mail even NO attachments On Mar 12, 2014, at 9:32 AM, Jim Shupert wrote: > > On 3/11/2014 3:09 PM, Eric Shubert wrote: >> On 03/11

Re: [qmailtoaster] More SPAM

2014-03-12 Thread Scot Needy
smtp QMAILQUEUE From QMAILQUEUE="/var/qmail/bin/simscan” To QMAILQUEUE="/var/qmail/bin/qmail-queue” On Mar 12, 2014, at 6:34 AM, Eric Shubert wrote: > On 03/12/2014 02:41 AM, Scot Needy wrote: >> So I installed spamdyke using /usr/sbin/qtp-install-spamdyke thinking that

Re: [qmailtoaster] More SPAM

2014-03-12 Thread Scot Needy
-mx reject-unresolvable-rdns sender-blacklist-file=/etc/spamdyke/blacklist_senders sender-whitelist-file=/etc/spamdyke/whitelist_senders tls-certificate-file=/var/qmail/control/servercert.pem tls-level=smtp On Mar 12, 2014, at 5:55 AM, Finn Buhelt wrote: > Hi Scot. > > Nope You

Re: [qmailtoaster] Password reset log

2014-03-12 Thread Scot Needy
grep modusernow /etc/httpd/logs/access_log* Assuming you have locked out your users to web access only. On Mar 11, 2014, at 5:00 AM, Linux wrote: > Hi, > How can we got the password change log. > > > Regards, > > Vivek Patil > system admin

Re: [qmailtoaster] More SPAM

2014-03-12 Thread Scot Needy
B -c "$MAXSMTPD" \ -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \ $SPAMDYKE --config-file $SPAMDYKE_CONF \ $SMTPD $VCHKPW /bin/true 2>&1 On Mar 12, 2014, at 1:50 AM, Eric Shubert wrote: > Scot, > > You really need to get QMT on the pe

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
New dilemma in my fight against SPAM. I updated the simcontrol file to include additional attachments and shortly all mail was blocked but I’m not sure why What exactly is the function of spam_hits ? Block ALL mail after 12 hits ? Per hour per … ? Is simcontrol even in play anymore ? 03-11

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
qmail. On Mar 11, 2014, at 2:38 PM, Eric Shubert wrote: > On 03/11/2014 10:46 AM, Scot Needy wrote: >> The device is behind a firewall/SLB. > > So I take it that all of the messages appear to be coming from the 10.x > address. spamdyke's pretty much ineffective that

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
, 2014, at 1:23 PM, Eric Shubert wrote: > On 03/11/2014 09:57 AM, Scot Needy wrote: >> NOTE: All sender domains and IP’s have been replaced with a unique name. >> >> >> CHKUSER accepted sender: from remote >> rcpt <> >> : sender accepted >> spa

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
The device is behind a firewall/SLB. I can't make the source IP transparent at this time. My only other option would be to stand it up directly on the public network. On Mar 11, 2014, at 1:23 PM, Eric Shubert wrote: > On 03/11/2014 09:57 AM, Scot Needy wrote: >> NOTE: All

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
mlog can find this easily > for you. > > -- > -Eric 'shubes' > > On 03/11/2014 08:49 AM, Scot Needy wrote: >> Appears to be a valid deny based on the senders domain SPF rules. >> >> The postmaster for the domain rejected confirms the connection and the S

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
, Eric Shubert wrote: > On 03/11/2014 08:16 AM, Scot Needy wrote: >> SPAM dyke is working great but I am also getting false positives from my >> clients SPF records. > > Just to be clear, SPF checking doesn't happen in spamdyke. Yet. This might be > a feature of spamdy

Re: [qmailtoaster] More SPAM

2014-03-11 Thread Scot Needy
dmin to have an > option "relay-only" for accounts which would set things up appropriately for > such accounts. Don't hold your breath on this though. ;) > > Anyone? > > -- > -Eric 'shubes' > > On 03/10/2014 04:07 AM, Scot Needy wrote: >>

Re: [qmailtoaster] Re: More SPAM

2014-03-10 Thread Scot Needy
Just wanted to sound off the list as I would have figured this to be a common requirement that has been solved many times over. On Mar 10, 2014, at 5:24 AM, Eric Shubert wrote: > On 03/09/2014 08:01 PM, Scot Needy wrote: >> Yes, I could, but I was really hoping to avoid managing ps

Re: [qmailtoaster] More SPAM

2014-03-09 Thread Scot Needy
the sender > email address? > > -- > -Eric 'shubes' > > On 03/09/2014 07:11 AM, Scot wrote: >> I would prefer not to have a local account and password shared by everyone >> in support. >> >> Sending mail from an authenticated user was t

Re: [qmailtoaster] Re: More SPAM

2014-03-09 Thread Scot
I would prefer not to have a local account and password shared by everyone in support. Sending mail from an authenticated user was the only way it would relay the mail. I don't want to inadvertently create an open relay either. My support users can come from a variety of ip's but even adding a

Re: [qmailtoaster] More SPAM

2014-03-07 Thread Scot Needy
ecurity, > but found that FPs sometimes happen from Financial Institutions (Chase, Amex, > et al), so I've set up tcp.smtp (based on their SPF records) to bypass > scanning from their servers. > > > On 03/07/2014 12:22 PM, Scot Needy wrote: >> >> >>

Re: [qmailtoaster] More SPAM

2014-03-07 Thread Scot Needy
ere the robust spam control is > happening. You'll see the results when you > # qmlog -f smtp > > -- > -Eric 'shubes' > > On 03/07/2014 11:07 AM, Scot Needy wrote: >> I didn’t think NAT had anything to do with it. Just wanted to make sure >&g

Re: [qmailtoaster] More SPAM

2014-03-07 Thread Scot Needy
. Installed QmailToaster and QMT+ on CentOS 5.1. I guess I expected a more robust spam control out of the box and was concerned it wasn’t working at all. How des SaneSecurity compare? Recommendations ? On Mar 7, 2014, at 11:31 AM, Eric Shubert wrote: > On 03/07/2014 07:39 AM, Scot Needy wr

[qmailtoaster] More SPAM

2014-03-07 Thread Scot Needy
My spam assassin does not appear to be working. Anyone have any good links for validating and troubleshooting spam through a NAT ? @40005319d7120170bc7c Mar 7 09:26:16.024 [31183] info: prefork: child states: II @40005319d7b1226759a4 Mar 7 09:28:55.577 [31082] info: spamd: conne

[qmailtoaster] Moderated Mailing list without confirmation?

2014-02-22 Thread Scot Needy
unsubscribe someone from this list without their authorization. Message Archives Archive list messages. Archive retrieval is . Index archive for web access via ezmlm-cgi. Thanks Scot Needy GMTI/Gannett 757-664-2217 Work 757-469-8118 Cell