Hi,
I´m using dovecot and custombuild in a fedora DA box.
Using spamblock with spamcop for a while....
sundently spamhaus stop filtering adresses
my mailboxes are full of spam.
using Mailwasher at home, it filters correctly with spamhaus & spamcop.
I tried to get a new exim.conf from the directadmin KB article, patch applied as indicated.
i got : "SpamBlocker.exim.conf.2.1.1-release " and
exim.pl dated: 28/march/2008
/etc/virtual/use_rbl domains is a link to /etc/virtual/domains.
rest of files: whitelist_senders, whitelist_host, whitelist_from blacklist_senders, blacklist_domains and bad_sender_host are there, but empty files.
this exim,conf ( testing) is 'as is' no modifications, to test.
Must I change something?
Is mandatory to give " primary_hostname " value correctly?
my uname ( from shell) gives me:
or must I indicate
SORBS & SAFESORBS are working and filtering as indicated in /var/exim/rejectlog
I included spamcop, but it´s too restrictive ( too much false positives)
Any ideas??
Thanks.
my ACL in exim.conf looks like this:
I´m using dovecot and custombuild in a fedora DA box.
Using spamblock with spamcop for a while....
sundently spamhaus stop filtering adresses
my mailboxes are full of spam.
using Mailwasher at home, it filters correctly with spamhaus & spamcop.
I tried to get a new exim.conf from the directadmin KB article, patch applied as indicated.
i got : "SpamBlocker.exim.conf.2.1.1-release " and
exim.pl dated: 28/march/2008
/etc/virtual/use_rbl domains is a link to /etc/virtual/domains.
rest of files: whitelist_senders, whitelist_host, whitelist_from blacklist_senders, blacklist_domains and bad_sender_host are there, but empty files.
this exim,conf ( testing) is 'as is' no modifications, to test.
Must I change something?
Is mandatory to give " primary_hostname " value correctly?
my uname ( from shell) gives me:
Code:
uname -a
Linux luna.gnomo.net 2.6.5-1.358smp #1 SMP Sat May 8 09:25:36 EDT 2004 i686 i686 i386 GNU/Linux
Code:
primary_hostname=luna.gnomo.netSORBS & SAFESORBS are working and filtering as indicated in /var/exim/rejectlog
I included spamcop, but it´s too restrictive ( too much false positives)
Any ideas??
Thanks.
my ACL in exim.conf looks like this:
Code:
######################################################################
# ACLs #
######################################################################
begin acl
# ACL that is used after the RCPT command
check_recipient:
# to block certain wellknown exploits, Deny for local domains if
# local parts begin with a dot or contain @ % ! / |
deny domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
# to restrict port 587 to authenticated users only
# see also daemon_smtp_ports above
accept hosts = +auth_relay_hosts
condition = ${if eq {$interface_port}{587} {yes}{no}}
endpass
message = relay not permitted, authentication required
authenticated = *
# allow local users to send outgoing messages using slashes
# and vertical bars in their local parts.
# Block outgoing local parts that begin with a dot, slash, or vertical
# bar but allows them within the local part.
# The sequence \..\ is barred. The usage of @ % and ! is barred as
# before. The motivation is to prevent your users (or their virii)
# from mounting certain kinds of attacks on remote sites.
deny domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
# local source whitelist
# accept if the source is local SMTP (i.e. not over TCP/IP).
# Test for this by testing for an empty sending host field.
accept hosts = :
# sender domains whitelist
# accept if sender domain is in whitelist
accept sender_domains = +whitelist_domains
# sender hosts whitelist
# accept if sender host is in whitelist
accept hosts = +whitelist_hosts
accept hosts = +whitelist_hosts_ip
# envelope senders whitelist
# accept if envelope sender is in whitelist
accept senders = +whitelist_senders
# accept mail to postmaster in any local domain, regardless of source
accept local_parts = postmaster
domains = +local_domains
# accept mail to abuse in any local domain, regardless of source
accept local_parts = abuse
domains = +local_domains
# accept mail to hostmaster in any local domain, regardless of source
accept local_parts = hostmaster
domains =+local_domains
# OPTIONAL MODIFICATIONS:
# If the page you're using to notify senders of blocked email of how
# to get their address unblocked will use a web form to send you email so
# you'll know to unblock those senders, then you may leave these lines
# commented out. However, if you'll be telling your senders of blocked
# email to send an email to [email protected], then you should
# replace "errors" with the left side of the email address you'll be
# using, and "example.com" with the right side of the email address and
# then uncomment the second two lines, leaving the first one commented.
# Doing this will mean anyone can send email to this specific address,
# even if they're at a blocked domain, and even if your domain is using
# blocklists.
# accept mail to [email protected], regardless of source
# accept local_parts = errors
# domains = example.com
# deny so-called "legal" spammers"
deny message = Email blocked by LBL - /
# only for domains that do want to be tested against RBLs
domains = +use_rbl_domains
sender_domains = +blacklist_domains
# deny using hostname in bad_sender_hosts blacklist
deny message = Email blocked by BSHL - /
# only for domains that do want to be tested against RBLs
domains = +use_rbl_domains
hosts = +bad_sender_hosts
# deny using IP in bad_sender_hosts blacklist
deny message = Email blocked by BSHL - /
# only for domains that do want to be tested against RBLs
domains = +use_rbl_domains
hosts = +bad_sender_hosts_ip
# deny using email address in blacklist_senders
deny message = Email blocked by BSAL - /
domains = use_rbl_domains
deny senders = +blacklist_senders
# By default we do NOT require sender verification.
# Sender verification denies unless sender address can be verified:
# If you want to require sender verification, i.e., that the sending
# address is routable and mail can be delivered to it, then
# uncomment the next line. If you do not want to require sender
# verification, leave the line commented out
require verify = sender
# deny using safe.dnsbl.sorbs.net
deny message = DENYMAIL - SAFESORBS - /
hosts = !+relay_hosts
domains = +use_rbl_domains
!authenticated = *
dnslists = safe.dnsbl.sorbs.net
# deny using spamhaus
deny message = DENYMAIL SPAMHAUS - /
# only for domains that do want to be tested against RBLs
hosts = !+relay_hosts
domains = +use_rbl_domains
!authenticated = *
dnslists = zen.spamhaus.org
# deny using njabl
deny message = DENYMAIL - NJABL - /
hosts = !+relay_hosts
domains = +use_rbl_domains
!authenticated = *
dnslists = dnsbl.njabl.org
# deny using cbl
# deny message = DENYMAIL - CBL - /
# hosts = !+relay_hosts
# domains = +use_rbl_domains
# !authenticated = *
# dnslists = cbl.abuseat.org
# deny using sorbs name based list
deny message = DENYMAIL - SORBS - /
domains =+use_rbl_domains
# rhsbl list is name based
dnslists = rhsbl.sorbs.net/$sender_address_domain
# deny using bl.spamcop.net
deny message = DENYMAIL - SPAMCOP - /
hosts = !+relay_hosts
domains = +use_rbl_domains
!authenticated = *
dnslists = bl.spamcop.net
# accept if address is in a local domain as long as recipient can be verified
accept domains = +local_domains
endpass
message = "Unknown User"
verify = recipient
# accept if address is in a domain for which we relay as long as recipient
# can be verified
accept domains = +relay_domains
endpass
verify=recipient
# accept if message comes for a host for which we are an outgoing relay
# recipient verification is omitted because many MUA clients don't cope
# well with SMTP error responses. If you are actually relaying from MTAs
# then you should probably add recipient verify here
accept hosts = +relay_hosts
accept hosts = +auth_relay_hosts
endpass
message = authentication required
authenticated = *
deny message = relay not permitted
# default at end of acl causes a "deny", but line below will give
# an explicit error message:
deny message = relay not permitted
# ACL that is used after the DATA command
check_message:
accept
Last edited:
