Synth-DIY Yahoo! Groups Archives

Milter-greylist logs and problem with spamdsock

2010-06-15 by Alexandre Santos

I´m would like to change the file log, is going to maillog.log by default, id like to change to postfix.log.

The other problem is that depending from where i seen a email, the milter calls the spamdsock or not, all address the same in the tests from and rcpt.

==> maillog <==

Jun 15 19:04:10 smtp-3 milter-greylist: SPF return code 1

Jun 15 19:04:10 smtp-3 milter-greylist: SPF lookup performed in 0.004370s

Jun 15 19:04:10 smtp-3 milter-greylist: (unknown id): addr = clover.wormly.com[66.228.123.50], from = , rcpt = <asantos@...>

Jun 15 19:04:10 smtp-3 milter-greylist: (unknown id): addr clover.wormly.com[66.228.123.50] from to delayed for 00:26:21

==> maillog <==

Jun 15 19:08:33 smtp milter-greylist: SPF return code 1

Jun 15 19:08:33 smtp milter-greylist: SPF lookup performed in 0.004113s

Jun 15 19:08:33 smtp-3 milter-greylist: (unknown id): addr = clover.wormly.com[66.228.123.50], from = , rcpt =

(...)

Jun 15 19:08:33 smtp milter-greylist: Mail from=, rcpt=(nil), addr=mail.example.com[......] is matched by entry dacl 147 greylist spamd score > 3 [msg "Message greylist for spam content."]

Jun 15 19:08:33 smtp milter-greylist: dumping 2 modifications

Jun 15 19:08:33 smtp milter-greylist: dumping 12 records in 0.062199s

I have this in greylist.conf for testing

spamdsock unix "/var/run/spamd.sock"

dacl blacklist spamd > 9

dacl greylist spamd > 3 msg "Message greylist for spam content."

dacl whitelist spamd < 4 msg "Message whitlist for spam content."

thanks

Re: [milter-greylist] Milter-greylist logs and problem with spamdsock

2010-06-16 by Oliver Fromme

Alexandre Santos wrote:
 > I\ufffdm would like to change the file log, is going to maillog.log by
 > default, id like to change to postfix.log.

That has nothing to do with milter-greylist.  You have to
configure it according to your syslog implementation.  For
example, on my system it is configured in /etc/syslog.conf
(and there's even a manual page syslog.conf(5)), but yours
may differ.

 > The other problem is that depending from where i seen a email, the
 > milter calls the spamdsock or not, all address the same in the tests
 > from and rcpt.

Your log doesn't show whether spamd was called or not (it
is always called), it only shows whether there was a match:

 > Jun 15 19:08:33 smtp milter-greylist: Mail from=<frm@...>,
 >     rcpt=(nil), addr=mail.example.com[......] is matched by entry
 >     dacl 147 greylist spamd score > 3 [msg "Message greylist for
 >     spam content."]
 > [...]
 > spamdsock unix "/var/run/spamd.sock"
 > dacl blacklist spamd > 9
 > dacl greylist spamd > 3 msg "Message greylist for spam content."
 > dacl whitelist spamd < 4 msg "Message whitlist for spam content."

What if the spamd score is >= 3 and <= 4?  Then there is no
match, so you won't see such a line in your log.

Best regards
   Oliver

-- 
Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing b. M.
Handelsregister: Registergericht Muenchen, HRA 74606,  Gesch\ufffdftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsregister: Registergericht M\ufffdn-
chen, HRB 125758,  Gesch\ufffdftsf\ufffdhrer: Maik Bachmann, Olaf Erb, Ralf Gebhart

FreeBSD-Dienstleistungen, -Produkte und mehr:  http://www.secnetix.de/bsd

"FreeBSD is Yoda, Linux is Luke Skywalker"
        -- Daniel C. Sobral