RE: [toaster] spam problem

2004-09-16 Thread Lucas Valdeón Villa
Hi Rene, Thank you for the rbls. But what really happen is that several ips try to open a smtp connection using from <> and rcpt to: [EMAIL PROTECTED] . Server send vchkusr error but seems connection still open during a while. I have all connections busy with spam and any user can send m

RE: [toaster] spam problem

2004-09-16 Thread Lucas Valdeón Villa
Hi, What I suffer is a 'dictionnary-generated' attack. Problem is the same described in: http://marc.theaimsgroup.com/?t=10950893654&r=1&w=2 One solution proposed in the qmail mailing list is this patch: http://netdevice.com/qmail/patch/goodrcptto-12.patch I think this patch is not in

RE: [toaster] spam problem

2004-09-16 Thread David
Hi, I think you may use chkusr patch instead, that's the one you'll find in shupp's guide. That way emails with invalid recipients are stopped at smtp level. Just be sure you chose the right version, cdb or mysql. HTH On Thu, 2004-09-16 at 10:17, Lucas Valdeón Villa wrote: > Hi, > > What I s

RE: [toaster] spam problem

2004-09-16 Thread Rene
If the Servers are even the same, just add them to you /home/vpopmail/etc/tcp.smtp file : *.*.*.*:allow,RBLSMTPD="-Connection refused because of virusmails from this server !!! contact us at foo" and run qmailctrl cdb after that

RE: [toaster] spam problem

2004-09-16 Thread Lucas Valdeón Villa
hi, Yes, I use chkusr patch, but the connections are slow and they use several rcpto to: Thank you, Lucas -- Hi, I think you may use chkusr patch instead, that's the one you'll find in shupp's guide. That way emails with invalid recipients

RE: [toaster] spam problem

2004-09-16 Thread Lucas Valdeón Villa
No, servers are always diferents :( Lucas -Mensaje original- De: Rene [mailto:[EMAIL PROTECTED] Enviado el: jue 16/09/2004 10:30 Para: [EMAIL PROTECTED] CC: Asunto: RE: [toaster] spam problem If the Ser

[toaster] Recieved by "0" and Squirrelmail

2004-09-16 Thread Marcus Williams
Hi - I've installed the toaster on a new box as per the toaster instructions (bar an upgrade to latest vpopmail and also I'm using debians installation of daemontools etc). I'm trying to get the squirrelmail spam (rbl list filters) plugin to work but I need to set my SpamFilters_YourHop variable u

Re: [toaster] Recieved by "0" and Squirrelmail

2004-09-16 Thread Marcus Williams
On 16/09/2004, Marcus Williams wrote: > Normally I could do this by using the > Received header that has my hostname in it, but with the toaster this > appears to be missing - I get a "0" where I'd expect the hostname. bah. Should've checked the run scripts. I didnt notice the "-l 0" on the tcpser

[toaster] Debugging chkuser patch

2004-09-16 Thread a . h . s . boy
I've applied Shupp's qmail-toaster-0.7b3 and chkuser-0.7b2.mysql patches to netqmail, and Qmail is functioning, but the chkuser patch doesn't appear to be working properly. My configuration is correct as far as I can tell -- the mfcheck patch, for example, is working right, and my .qmail-defaul

Re: [toaster] Debugging chkuser patch

2004-09-16 Thread Bill Shupp
a.h.s. boy wrote: I've applied Shupp's qmail-toaster-0.7b3 and chkuser-0.7b2.mysql patches to netqmail, and Qmail is functioning, but the chkuser patch doesn't appear to be working properly. My configuration is correct as far as I can tell -- the mfcheck patch, for example, is working right, an

Re: [toaster] spam problem

2004-09-16 Thread Bill Shupp
Lucas Valdeón Villa wrote: No, servers are always diferents :( Are they at least from the same network block? You might try the 0.7b3 patch for the toaster. I contains the spam-throttle patch, which is similar to tarpit but looks at simultaneous incoming connections, rather than per session l

RE: [toaster] spam problem

2004-09-16 Thread Lucas Valdeón Villa
Hi, No, they are from different network segments :( So spam-throttle patch won´t be effective. Afaik this patch tries to slow down connections from the same ip. The attack is from several ips and they establish a connection doing this slow. So my concurrencyincoming is reach and server reje

Re: [toaster] spam problem

2004-09-16 Thread Bill Shupp
Lucas Valdeón Villa wrote: Hi, No, they are from different network segments :( So spam-throttle patch won´t be effective. Afaik this patch tries to slow down connections from the same ip. No, not exactly. That's what tarpit does. Spam-throttle does it by net block. The attack is from several