Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: gbentley on November 20, 2018, 01:04:31 PM

Title: WBL's Revisited
Post by: gbentley on November 20, 2018, 01:04:31 PM

Hi All,

Time has marched on somewhat and I am just wondering what lists if any you are using and how that's working out? uceprotect is becoming a bit of a pain and more than a little aggressive...

Here is my config;

config show qpsmtpd SBList
qpsmtpd=service
    A_Record_RBL=b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>
    Bcc=disabled
    BccMode=cc
    BccUser=maillog
    DNSBL=enabled
    LogLevel=6
    MaxScannerSize=25000000
    RBLList=bl.spamcop.net,dnsbl-1.uceprotect.net,dnsbl-2.uceprotect.net,psbl.surreil.com,zen.spamhaus.org
    RHSBL=enabled
    RelayRequiresAuth=disabled
    SBLList=dbl.spamhaus.org,mulit.surbl.org,black.uribl.com,rhsbl.sorbs.net
    TlsBeforeAuth=1
    UBLList=multi.surbl.org:8-16-64-128,black.uribl.com,rhsbl.sorbs.net
    URIBL=disabled
    access=public
    qplogsumm=disabled
    status=enabled

Any advice appreciated :)

Title: Re: WBL's Revisited
Post by: ReetP on November 20, 2018, 02:31:00 PM

Yes UCE is a bit aggressive - if you don't like it then remove the servers from your config.

Not sure where this came from?

Code: [Select]

A_Record_RBL=b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>
I think you ought to read this:

https://wiki.contribs.org/Qpsmtpd#A-Record_DNSBL_Services

You could enable URIBL:

https://wiki.contribs.org/Email#Qpsmtpd_for_SME_versions_9.2_and_Later


Hmmm - this should probably be enabled unless you have a good reason not to:

Code: [Select]

   RelayRequiresAuth=disabled

Go and have a good read through the documentation so you really understand what each bit does and how to control it. Well worth the time and effort.

Title: Re: WBL's Revisited
Post by: gbentley on November 20, 2018, 06:19:19 PM

Quote from: ReetP on November 20, 2018, 02:31:00 PM

Code: [Select]

   RelayRequiresAuth=disabled

Thanks for reminding me about that - and the other advice :)

Title: Re: WBL's Revisited
Post by: ReetP on November 20, 2018, 06:37:08 PM

Hehehehehehe hope it helps !

Title: Re: WBL's Revisited
Post by: gbentley on November 20, 2018, 10:35:33 PM

Out of interest are there any scripts that would help me create a 'total emails rejected by blocklist' report from the log files?

Title: Re: WBL's Revisited
Post by: ReetP on November 21, 2018, 01:20:50 AM

Check the wiki for mailstats.....

Title: Re: WBL's Revisited
Post by: mmccarn on November 22, 2018, 06:42:24 PM

Quote from: gbentley on November 20, 2018, 01:04:31 PM

config show qpsmtpd SBList
qpsmtpd=service
    A_Record_RBL=b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>
    ...
    RBLList=bl.spamcop.net,dnsbl-1.uceprotect.net,dnsbl-2.uceprotect.net,psbl.surreil.com,zen.spamhaus.org
    ...

The update that allowed commas instead of colons in RBLList also allows you to put barracudacentral in RBLList instead of A_Record_RBL:

Here is what I'm using for RBLList:

Code: [Select]

config getprop qpsmtpd RBLList
zen.spamhaus.org,bl.spamcop.net,truncate.gbudb.net,ix.dnsbl.manitu.net,b.barracudacentral.org:Blocked - see http://bbl.barracudacentral.com/q.cgi?ip=%IP%

I try to include the commands I use for email analysis here:
https://wiki.contribs.org/Email_Statistics#Useful_Commands

Quote from: Count messages denied by DNSBL Block Lists

if [ -z $DAYS ]; then DAYS=1; fi; \
echo -n "Days of logfiles to scan [$DAYS]: "; read NEWDAYS; \
if [ $NEWDAYS ]; then DAYS=$NEWDAYS; fi; \
awk -F"[\t]" ' /logterse.*dnsbl/ \
{                                \
split($8,msg,"/");               \
svc=msg[3];                      \
count[svc]++;                    \
count[" Total"]++;                \
}                                \
END                              \
{                                \
for (j in count)                 \
print count[j] "\t" j;           \
}'                               \
$(find /var/log/qpsmtpd /var/log/sqpsmtpd -ctime -$DAYS -type f -name "@*" -o -name current)

This forum post includes a perl script that also gives email delivery stats:
https://forums.contribs.org/index.php/topic,52750.msg272084.html#msg272084

This bug includes a script that you can use to search all of the email in your users' folders, then re-check them against the RBL list of your choice:
https://bugs.contribs.org/show_bug.cgi?id=9110