RE: [vps-mail] Dramatic increase of SPAM during last days

["Bennett Lanford" <ben@xxxxxxxxxxxxx>]

On Thu, August 26, 2004 1:59 pm, Brian Haines said:
> Here is my .mc file. Spam Assassin is still not working after I added the
> DNSBLs.
>
> Any ideas?

Try deleting the three lines:

define(`LOCAL_MAILER_ARGS', `mail -f $g $u')dnl
define(`LOCAL_MAILER_FLAGS', `CmuX')dnl
define(`LOCAL_MAILER_PATH', `/bin/imail')dnl

(They are in conflict with the procmail line right above them.)

Ben

>
> # Generates a sendmail.cf that uses imail as the local delivery agent
> # Relayers can authenticate with either POP before SMTP or SMTP AUTH
> #
>
> VERSIONID(`$Id$')
> OSTYPE(freebsd4)dnl
>
> define(`MAIL_SETTINGS_DIR',`/etc/')dnl Rather than /etc/mail/
> define(`DATABASE_MAP_TYPE', `hash')dnl
>
> dnl # Optional file of domains we handle--one domain name per line
> define(`confCW_FILE', `-o /etc/local-host-names')dnl
> FEATURE(`use_cw_file')dnl
>
> # SMTP AUTH configuration for relaying through server
> define(`confAUTH_MECHANISMS',`PLAIN LOGIN')dnl
> TRUST_AUTH_MECH(`PLAIN LOGIN')dnl
>
> FEATURE(`access_db', `hash -T<TMPF> -o /etc/access')dnl
> FEATURE(`blacklist_recipients')dnl # Allows access.db's To: to work
> dnl FEATURE(`relay_mail_from')dnl # Allows access.db's From: to work
> FEATURE(`relay_hosts_only')dnl # Allows access.db's Connect: to work
> define(`ALIAS_FILE', `/etc/aliases')dnl
> define(`HELP_FILE',`/etc/sendmail.hf')dnl
> define(`QUEUE_DIR', `/var/spool/mqueue')dnl
> define(`STATUS_FILE',`/etc/sendmail.st')dnl
> define(`confALIAS_WAIT',`1')dnl
> define(`confTEMP_FILE_MODE', 0600)dnl
> define(`confDEF_USER_ID',126:100)dnl
> define(`confBIND_OPTS',`')dnl
> define(`confMCI_CACHE_SIZE',4)dnl
> define(`confTO_QUEUERETURN',`3d')dnl
> define(`confTO_QUEUEWARN', `4h')dnl
> define(`confTIME_ZONE', `USE_TZ')dnl
> define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')dnl
> define(`confTO_DATABLOCK', `30s')dnl
> define(`confTO_IDENT', `0')dnl
> define(`confSERVICE_SWITCH_FILE', `/etc/service.switch')dnl
>
> dnl # Domains (and users at those domains) we handle mail for
> FEATURE(`virtusertable', `hash -o /etc/virtmaps')dnl
>
> LOCAL_RULESETS
> SLocal_check_rcpt
> # Next three lines check for successful SMTP authentication
> R$*			$: $&{auth_type} $| $1
> R$+ $| $*		$@ OK	SMTP AUTHenticated; OK
> R$* $| $*		$2	Look more
> R<$*>			$1
> R$+ @ $=w		$@ OK
> R$+ @ $=R		$@ OK
> R$+			$: $(dequote "" $&{client_addr} $: 0 $) $| $1
> R$-.$-.$-.$- $| $*	$: [$1.$2.$3.$4] $| $5
> R$=w $| $*		$@ OK
> R[$-.$-.$-.$-] $| $*	$: $1.$2.$3.$4 $| $5
> R0 $| $*		$@ OK
> R$* $| $*		$: $(relayers $1 $: ERROR $)
> RERROR			$@ $#error $@ 5.7.1 $: "550 Relaying denied,
> authenticate with SMTP AUTH or POP/IMAP"
> R$*			$@ $#OK		OK if in authenticated relayers db
> ..
>
> dnl # Check for mail from users and/or domains listed in spammers.db
> SLocal_check_mail
> R<$*>			$1		Remove angle brackets
> R$*			$: $(spammers $1 $: $1 $)
> R$*@$*			$: $(spammers $2 $: OK $)
> ROK			$@ OK
> R$+			$#error $@ 5.0.0 $: "551 We don't accept mail from
> this host name/address"
>
> LOCAL_CONFIG
> Kspammers hash /etc/spammers
> Krelayers hash /etc/relayers
>
>
> DAEMON_OPTIONS(`Name=MTA')
> DAEMON_OPTIONS(`Port=5190, Name=MSA5190')
>
> #Brian added
> FEATURE(`dnsbl', `bl.spamcop.net', `"550 (SPAM - Spamcop)"')
> FEATURE(`dnsbl', `sbl.spamhaus.org', `"550 (SPAM - Spamhaus)"')
> FEATURE(`dnsbl', `list.dsbl.org', `"550 (SPAM - dsbl)"')
> FEATURE(`dnsbl', `relays.ordb.org', `"550 (SPAM - ordb)"')
> FEATURE(`local_procmail')dnl
>
> define(`LOCAL_MAILER_ARGS', `mail -f $g $u')dnl
> define(`LOCAL_MAILER_FLAGS', `CmuX')dnl
> define(`LOCAL_MAILER_PATH', `/bin/imail')dnl
> MAILER(local)dnl
> MAILER(smtp)dnl
>
> -----Original Message-----
> From: owner-vps-mail@xxxxxxxxxxxx [mailto:owner-vps-mail@xxxxxxxxxxxx] On
> Behalf Of Brian Haines
> Sent: Thursday, August 26, 2004 8:55 AM
> To: vps-mail@xxxxxxxxxxxx
> Subject: RE: [vps-mail] Dramatic increase of SPAM during last days
>
>
> It did not. I reinstalled spamassassin and I think it removed my dsnbl
> stuff, so I added: FEATURE(`local_procmail')dnl to my mc file and rebuilt
> the the cf. Lets see how it goes.
>
> Thanks!
>
> -----Original Message-----
> From: owner-vps-mail@xxxxxxxxxxxx [mailto:owner-vps-mail@xxxxxxxxxxxx] On
> Behalf Of Bennett Lanford
> Sent: Wednesday, August 25, 2004 12:28 PM
> To: vps-mail@xxxxxxxxxxxx
> Subject: RE: [vps-mail] Dramatic increase of SPAM during last days
>
>
> On Wed, August 25, 2004 7:34 am, Brian Haines said:
>> Now that I have my sendmail config using these black lists, my
>> SpamAssassin does not appear to be working. I do Site Wide spam
>> filtering and spam that is getting through has no X-Spam headers.
>>
>> I know these programs are not mutually exclusive, so where have I gone
>> wrong?
>
> Assuming that you are calling SpamAssassin from a procmail rc file, it
> might
> be worth double checking to make sure that procmail is still your local
> delivery agent.  Take a look at the sendmail macro configuration
> (mc) file that you built your sendmail.cf from. Make sure that it has
> *one* of the following lines towards the bottom (before the MAILER lines):
>
> FEATURE(`local_procmail')dnl
>     [OR]
> FEATURE(`local_procmail_lmtp')dnl
>
> --
> Bennett Lanford
> ben@xxxxxxxxxxxxx
> ======================================================================
> This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
> Before posting a question, please search the archives (see above URL).
>
>
>
> ======================================================================
> This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
> Before posting a question, please search the archives (see above URL).
>
>
>
> ======================================================================
> This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
> Before posting a question, please search the archives (see above URL).
>
>

======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).