[cobalt-users] Re: SOLVED: Sendmail 8.9.3 and ORDB

[Peter Frederick <pfred@xxxxxxxxx>]

On Mon, 24 Mar 2003 12:27:28 -0800, you wrote:

>At 10:48 PM 3/19/2003, you wrote:
>>It'll take some CPU process from your system to compares w/the list,
>>there's no agreement or such.  Since this afternoon, my mail log logged
>>23442 spams denied from njabl, 6893 spams denied from spamcop, 6084
>spams
>>denied from osirusoft.  DNSBL might not be 100% perfect, but close
>enough.
>>
>>Very much worth the effort to put in a few lines in your sendmail.cf.
>>
>Is it possible to add in the /etc/mail/access a domain that is being
>blocked to allow that to come in?  I do not know which ruleset Sendmail
>is reading before it gets rejected by the DNSBL.

Yes - it's easy to test. If one of your buddies happens to be on an open
relay or block list just add the line:

<BUDDY_IP_ADRESS>	OK
or
<BUDDY_DOMAIN_NAME>	OK

to /etc/mail/access

rebuild the hashmap with 'makemap hash /etc/mail/access < /etc/mail/access'

It reads the rule for the access database before the DNSBL rules. I've
added 5 or 6 addresses over time because of it to let in otherwise blocked
domains.

Sometimes if someone is being really persistent or you want to find out who
they are or who they are trying to email (by watching the maillog file) you
may want to put an OK line in for that domain just long enough to let a
message through that would otherwise be blocked. 

I've noticed on occasion the same address trying once every hour. It didn't
look like a spammer so I quickly edited the /etc/mail/access table with
their IP address and OK then watched the maillog file around the time on
the next attempt to connect - you can then see who the mail is addressed
to. If they are still spam then just remove them or block them at your
firewall if you really want to get rid of them!

Peter


>
>Thanks,
>Elmer
>
>>
>>- Mike
>>
>>
>>On Wed, 19 Mar 2003, Bill Gunning wrote:
>>
>> >
>
>_____________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
>http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 
Peter Frederick
MIS Director, Indiana Packers Corp, Delphi IN
Phone: (765) 564-9705   Fax: (765) 564-3684
Work: pfred@xxxxxxxxx   (Qube3 Professional running 6.4)
============================================================================
'Tis better to light one candle than to curse the darkness a thousand times!