Koozali.org: home of the SME Server

QPSMTPD problem

Offline filloweb

  • *****
  • 166
  • +0/-0
QPSMTPD problem
« on: July 10, 2008, 09:47:33 AM »
Hi all.

I've a SME 7.3 up2date.

My QPSMTP config is:

Code: [Select]
more qpsmtp.conf
qpsmtpd=service
    Bcc=enabled
    BccMode=cc
    BccUser=waltdisney@disney.com
    DNSBL=enabled
    LogLevel=6
    MaxScannerSize=25000000
    RBLList=bl.spamcop.net:combined.njabl.org:dnsbl.ahbl.org:dnsbl-1.uceprotect.net:dnsbl-2.uceprotect.net:list.dsbl.org:multi
hop.dsbl.org:psbl.surriel.com:sbl-xbl.spamhaus.org
    RHSBL=enabled
    RequireResolvableFromHost=no
    SBLList=bogusmx.rfc-ignorant.org:multi.surbl.org:black.uribl.com:rhsbl.sorbs.net:bulk.rhs.mailpolice.com:fraud.rhs.mailpol
ice.com:porn.rhs.mailpolice.com:adult.rhs.mailpolice.com:ex.dnsbl.org:blackhole.securitysage.com
    access=public
    qplogsumm=disabled
    status=enabled

and my error on /var/log/qpsmtpd/current is:
Code: [Select]
2008-07-10 09:29:37.268218500 4956 Accepted connection 0/40 from 212.216.176.109 / vsmtp21.tin.it
2008-07-10 09:29:37.268226500 4956 Connection from vsmtp21.tin.it [212.216.176.109]
2008-07-10 09:29:38.342847500 4956 check_earlytalker plugin: remote host said nothing spontaneous, proceeding
2008-07-10 09:29:38.397109500 4956 220 mail.disney.it ESMTP
2008-07-10 09:29:38.473995500 4956 dispatching EHLO vsmtp21.tin.it
2008-07-10 09:29:38.482299500 4956 250-stilmoil.it Hi vsmtp21.tin.it [212.216.176.109]
2008-07-10 09:29:38.483119500 4956 250-PIPELINING
2008-07-10 09:29:38.484032500 4956 250-8BITMIME
2008-07-10 09:29:38.484824500 4956 250 SIZE 15000000
2008-07-10 09:29:38.556786500 4956 dispatching MAIL FROM:<bmiselli@sender.com> SIZE=1918
2008-07-10 09:29:38.556794500 4956 full from_parameter: FROM:<bmiselli@sender.com> SIZE=1918
2008-07-10 09:29:38.562185500 4956 from email address : [<bmiselli@sender.com>]
2008-07-10 09:29:38.615322500 4956 getting mail from <bmiselli@sender.com>
2008-07-10 09:29:38.616226500 4956 250 <bmiselli@sender.com>, sender OK - how exciting to get mail from you!
2008-07-10 09:29:38.617423500 4956 dispatching RCPT TO:<commerciale@disney.it>
2008-07-10 09:29:38.618970500 4956 to email address : [<commerciale@disney.it>]
2008-07-10 09:29:38.710122500 4956 logging::logterse plugin: ` 212.216.176.109  vsmtp21.tin.it  vsmtp21.tin.it  <bmiselli@sender.com>            rhsbl   901     82.53.187.212 has been block due to excessive queries.  msg denied before queued
2008-07-10 09:29:38.712197500 4956 550 82.53.187.212 has been block due to excessive queries.
2008-07-10 09:29:38.713402500 4956 dispatching DATA
2008-07-10 09:29:38.714765500 4956 503 RCPT first
2008-07-10 09:29:38.842613500 4956 dispatching RSET
2008-07-10 09:29:38.842619500 4956 250 OK
2008-07-10 09:29:38.897653500 4956 dispatching QUIT
2008-07-10 09:29:38.902649500 4956 221 stilmoil.it closing connection. Have a wonderful day.
2008-07-10 09:29:38.902657500 4956 click, disconnecting
2008-07-10 09:29:39.109786500 3900 cleaning up after 4956
Now, I've disabled in QPSMTPD:
DNSBL
RHSBL

Where is the problem about this error: ???
Code: [Select]
82.53.187.212 has been block due to excessive queries
Thanks a lot.
filloweb
« Last Edit: July 10, 2008, 09:50:14 AM by filloweb »

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: QPSMTPD problem
« Reply #1 on: July 10, 2008, 04:18:19 PM »
Where is the problem about this error: ???
Code: [Select]
82.53.187.212 has been block due to excessive queries

One of the black lists you are/were querying are returning that response to your queries, because you have exceeded the number of queries they allow. You should either research the policies of the blacklist services, or add them one at a time until you see the response again, so that you know which one you shouldn't be using.

Offline filloweb

  • *****
  • 166
  • +0/-0
Re: QPSMTPD problem
« Reply #2 on: July 15, 2008, 07:44:33 PM »
Hi.

Thanks a lot. I've found this problem in a DNS query for Telecom Alice. They redirect all DNS query to a DNS server that answer a bad result...

I've changed all DNS server and all go right.

Bye !!!
filloweb