Re: Getting greylisting going on a new Debian
thing <[email protected]> Fri, 27 Jun 2008 20:20:32 +1200
| Newsgroups | gmane.mail.spam.greylist.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, Think this line has solved it... I did just the local injection into the mysql database and it passed, tried a remote and it failed as 192.168.1 was not injected....checking the database I no longer get a NULL, i get an IP!!! :D mysql> select * from relaytofrom; +----+---------------+--------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ | id | relay_ip | mail_from | rcpt_to | block_expires | record_expires | blocked_count | passed_count | aborted_count | origin_type | create_time | last_update | +----+---------------+--------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ | 16 | 127.0.0.1 | NULL | NULL | 0000-00-00 00:00:00 | 9999-12-31 23:59:59 | 0 | 0 | 0 | MANUAL | 2008-06-27 14:27:37 | 2008-06-27 14:27:37 | | 43 | 192.168.1.108 | <[email protected]> | <[email protected]> | 2008-06-27 20:26:14 | 2008-06-28 01:18:14 | 1 | 0 | 0 | AUTO | 2008-06-27 20:18:14 | 2008-06-27 20:18:14 | +----+---------------+--------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ 2 rows in set (0.00 sec) mysql> I now have injected 192.168.1 so you should get this email.... this is a test. 815pm.... regards Steven Evan Harris wrote: > > Yes, it means sendmail isn't passing many of the required macro values > properly. > > Try adding this to your sendmail.mc: > > define(`confMILTER_MACROS_ENVRCPT', confMILTER_MACROS_ENVRCPT``, {i}, > {auth_type}, {auth_authen}, {auth_ssf}, {auth_author}, > {mail_mailer},{mail_host}, {mail_addr}, {if_addr}, {_}'')dnl > > If that doesn't solve your problem, it's probably a libmilter issue, > so I would try recompiling sendmail, libmilter, and the perl milter > interface. > > Evan > > > On Fri, 27 Jun 2008, Steven Jones wrote: > >> I have picked this off the console, does it mean anything? >> >> 8><----- >> === 2008-06-27 15:05:21 === >> Stored Sender: <[email protected]> >> Passed Recipient: <[email protected]> >> Use of uninitialized value in pattern match (m//) at >> /usr/local/sbin/relaydelay.pl line 589. >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 607. >> Relay: - If_Addr: 202.78.148.43 >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 608. >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 608. >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 608. >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 608. >> RelayIP: - RelayName: - RelayIdent: - PossiblyForged: >> From: [email protected] - To: thing >> Use of uninitialized value in concatenation (.) or string at >> /usr/local/sbin/relaydelay.pl line 610. >> InMailer: esmtp - OutMailer: local - QueueID: >> Use of uninitialized value in string eq at >> /usr/local/sbin/relaydelay.pl line 625. >> Use of uninitialized value in substitution (s///) at >> /usr/local/sbin/relaydelay.pl line 653. >> Use of uninitialized value in substitution (s///) at >> /usr/local/sbin/relaydelay.pl line 653. >> Use of uninitialized value in substitution (s///) at >> /usr/local/sbin/relaydelay.pl line 653. >> Use of uninitialized value in substitution (s///) at >> /usr/local/sbin/relaydelay.pl line 653. >> Use of uninitialized value in substitution (s///) at >> /usr/local/sbin/relaydelay.pl line 745. >> Email is known and block has expired. Passing the mail. rowid: 19 >> IN EOM CALLBACK - PrivData: >> 19<[email protected]><[email protected]> >> * Mail successfully processed. Incremented passed count on rowid 19. >> 8><------ >> >> >> >> -----Original Message----- >> From: [email protected] on behalf of Brian Ross >> Sent: Fri 27/06/2008 13:31 >> To: Greylisting Users and Developers Discussion; [email protected] >> Subject: Re: [Greylist-users] Getting greylisting going on a new Debian >> >> Okay... do a couple of things: >> - make sure that relaydelay.pl is consulting your .conf file >> (double-check the path) >> - set $reverse_mail_tracking=0; in your .conf file >> - if you can, delete everything from the relaytofrom table and >> re-add the whitelist entries for your local subnet(s), be sure to >> include 127.0 >> - Run a test again.... please send the complete log of the test >> event including the client connect info, etc... (there is some >> information which sendmail logs before assigning a qid, you can >> correlate by the PID number after sm-mta). >> >> Also please describe the circumstances of your test >> - how are you sending the mail -- is it via the command line on the >> smtp host? are you using a separate client machine? >> >> >> >> >> thing wrote: >>> 8><---- >>> Jun 27 12:55:23 hermes sm-mta[17649]: m5R0tNJf017649: Milter: >>> to=<[email protected]>, reject=451 4.7.1 Please try again later >>> (TEMPFAIL) >>> Jun 27 12:55:27 hermes sm-mta[17649]: m5R0tNJf017649: >>> from=<[email protected]>, size=338, class=0, nrcpts=0, >>> proto=ESMTP, daemon=MTA-v4, relay=[192.168.1.108] >>> 8><---- >>> >>> | 9 | NULL | <[email protected]> | >>> <[email protected]> | 2008-06-27 12:55:23 | >>> 2008-07-01 15:54:23 | 2 | 0 | 0 | >>> AUTO | 2008-06-27 12:54:23 | 2008-06-27 12:55:23 | >>> +----+-----------+----------------------------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ >>> >>> >>> 9 rows in set (0.00 sec) >>> >>> regards >>> >>> Steven >>> >>> >>> >>> Brian Ross wrote: >>>> I just reviewed the code for relaydelay and realized I'd forgotten >>>> about the reverse-whitelist option (which would account for the NULLs >>>> in the relay_ip column). Do you have reverse mail tracking on, or >>>> off ($reverse_mail_tracking) (it defaults to on)? >>>> >>>> I'm thinking that we need more information to help you with this >>>> problem.... if you could more carefully coordinate the log snippets >>>> that you're sending with the relaytofrom table information, we might >>>> be able to provide better ideas. >>>> >>>> -Brian >>>> >>>> >>>> thing wrote: >>>>> Brian Ross wrote: >>>>>> The NULLs in relay_ip column don't look right to me at all.... >>>>>> There should always be a value for relay_ip. How did you get the >>>>>> Sendmail::Milter perl module? Did you build it yourself? Do you >>>>>> know if it's linked to the proper version of libmilter for your >>>>>> version of sendmail? >>>>> I have no idea, its all in the Debian package system. >>>>> >>>>> What are the dependancies? >>>>> >>>>> I will go digging through the apt-cache, see if something is missing. >>>>> >>>>> hmmmm, >>>>> >>>>> I have just installed this, >>>>> >>>>> libmail-milter-perl - Perl extension modules for mail filtering via >>>>> milter >>>>> >>>>> ? >>>>> >>>>> Will test. >>>>> >>>>> Nope failed.... >>>>> >>>>> This is what's installed. >>>>> >>>>> 8><--------- >>>>> hermes:/etc/mail# apt-get install libmilter0 >>>>> Reading package lists... Done >>>>> Building dependency tree... Done >>>>> libmilter0 is already the newest version. >>>>> 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. >>>>> hermes:/etc/mail# >>>>> hermes:/etc/mail# apt-get install libsendmail-pmilter-perl >>>>> Reading package lists... Done >>>>> Building dependency tree... Done >>>>> libsendmail-pmilter-perl is already the newest version. >>>>> 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. >>>>> 8><-------- >>>>> >>>>>> >>>>>> Could you send the complete log entries for this qid: >>>>>> m5QMW4RO016829 ? >>>>>> >>>>> 8><----------- >>>>> hermes:/var/log# grep m5QMW4RO016829 mail.log >>>>> Jun 27 10:32:05 hermes sm-mta[16829]: m5QMW4RO016829: Milter: >>>>> to=<[email protected]>, reject=451 4.7.1 Please try again later >>>>> (TEMPFAIL) >>>>> Jun 27 10:32:07 hermes sm-mta[16829]: m5QMW4RO016829: >>>>> from=<[email protected]>, size=339, class=0, nrcpts=0, >>>>> proto=ESMTP, daemon=MTA-v4, relay=[192.168.1.108] >>>>> 8><----------- >>>>> >>>>> >>>>> >>>>>> >>>>>> >>>>>> thing wrote: >>>>>>> >>>>>>> from the database. >>>>>>> >>>>>>> mysql> select * from relaytofrom; >>>>>>> +----+-----------+----------------------------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ >>>>>>> >>>>>>> >>>>>>> | id | relay_ip | mail_from | >>>>>>> rcpt_to | block_expires | >>>>>>> record_expires | blocked_count | passed_count | aborted_count >>>>>>> | origin_type | create_time | last_update | >>>>>>> +----+-----------+----------------------------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ >>>>>>> >>>>>>> >>>>>>> | 1 | 192.168.1 | NULL | >>>>>>> NULL | 0000-00-00 00:00:00 | >>>>>>> 9999-12-31 23:59:59 | 0 | 0 | 0 >>>>>>> | MANUAL | 2008-06-27 09:41:17 | 2008-06-27 09:41:17 | >>>>>>> | 2 | 127.0.0.1 | NULL | >>>>>>> NULL | 0000-00-00 00:00:00 | >>>>>>> 9999-12-31 23:59:59 | 0 | 0 | 0 >>>>>>> | MANUAL | 2008-06-27 09:41:25 | 2008-06-27 09:41:25 | >>>>>>> | 3 | NULL | <[email protected]> | >>>>>>> <[email protected]> | 2008-06-27 09:43:41 | >>>>>>> 2008-08-02 10:50:16 | 1 | 6 | 0 >>>>>>> | AUTO | 2008-06-27 09:42:41 | 2008-06-27 10:50:16 | >>>>>>> | 4 | NULL | <[email protected]> | >>>>>>> <[email protected]> | 2008-06-27 09:43:47 | >>>>>>> 2008-08-02 09:43:50 | 3 | 1 | 0 >>>>>>> | AUTO | 2008-06-27 09:42:47 | 2008-06-27 09:43:50 | >>>>>>> | 5 | NULL | <[email protected]> | >>>>>>> <[email protected]> | 2008-06-27 09:49:07 | >>>>>>> 2008-08-02 10:31:36 | 4 | 2 | 0 >>>>>>> | AUTO | 2008-06-27 09:48:07 | 2008-06-27 10:31:36 | >>>>>>> | 6 | NULL | <[email protected]> | >>>>>>> <[email protected]> | 2008-06-27 10:33:05 | >>>>>>> 2008-07-01 13:32:05 | 1 | 0 | 0 >>>>>>> | AUTO | 2008-06-27 10:32:05 | 2008-06-27 10:32:05 | >>>>>>> | 7 | NULL | <[email protected]> | >>>>>>> <[email protected]> | 2008-06-27 10:38:42 | >>>>>>> 2008-08-02 10:40:26 | 1 | 1 | 0 >>>>>>> | AUTO | 2008-06-27 10:37:42 | 2008-06-27 10:40:26 | >>>>>>> +----+-----------+----------------------------------------------+--------------------------------------+---------------------+---------------------+---------------+--------------+---------------+-------------+---------------------+---------------------+ >>>>>>> >>>>>>> >>>>>>> 7 rows in set (0.00 sec) >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Greylist-users mailing list >>>>>>> [email protected] >>>>>>> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >>>>> >>>>> _______________________________________________ >>>>> Greylist-users mailing list >>>>> [email protected] >>>>> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >>>> _______________________________________________ >>>> Greylist-users mailing list >>>> [email protected] >>>> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >>> >>> _______________________________________________ >>> Greylist-users mailing list >>> [email protected] >>> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >> _______________________________________________ >> Greylist-users mailing list >> [email protected] >> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >> >> _______________________________________________ >> Greylist-users mailing list >> [email protected] >> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users >>