#1  
Old 21st May 2008, 15:08
charles charles is offline
Banned
 
Join Date: Jun 2007
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default SpamSnake Not Doing Anything

Hello,

I'm pretty much of a Linux newbie, but we are getting inundated by spam.

I followed all the instructions in the SpamSnake tutorial (http://www.howtoforge.com/the-perfec...ke-ubuntu-8.04) and it isn't producing any errors, but it also isn't doing anything.

When I log into MailWatch there are no messages listed. Under Recent Messages and most of the Reports it always returns "No Rows Retrieved". I checked the status and configurations under Tools/Reports and they don't return any errors.

I am receiving a huge number of emails from the system that all start "Postfix SMTP server: errors from unknown[SOME.IP.ADDR.HERE]" They are almost entirely addressed to invalid recipients, but some look like they could be legitimate mail. I sent a test mail in and it never arrived in my mailbox.

What is my next step for troubleshooting this?
Thanks.

Peter
Reply With Quote
Sponsored Links
  #2  
Old 21st May 2008, 16:08
Rocky Rocky is offline
Senior Member
 
Join Date: Oct 2005
Posts: 551
Thanks: 14
Thanked 48 Times in 47 Posts
Default

Hi,

Prior to installing MailWatch, were you receiving emails? I would double check every step to make sure that you did everything correctly. Also, are you using it as a relay, because thats what its for?

Rocky
__________________
Home of the SpamSnake

Last edited by Rocky; 21st May 2008 at 16:12.
Reply With Quote
  #3  
Old 21st May 2008, 16:35
charles charles is offline
Banned
 
Join Date: Jun 2007
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by Rocky
Hi,

Prior to installing MailWatch, were you receiving emails? I would double check every step to make sure that you did everything correctly. Also, are you using it as a relay, because thats what its for?

Rocky
Yes, I was receiving mail. I had my MX record pointing directly to my Exchange server. I changed it to point to the SpamSnake and then had the SpamSnake relay to the Exchange server.

I think there may be a bigger problem because all the error messages from the Postfix server include the line "451 4.3.5 Server configuration error" If I telnet into the SpamSnake and try to send mail to a legitimate Exchange user at our domain it returns a 4.3.5 even with a valid email address.
Reply With Quote
  #4  
Old 21st May 2008, 16:43
Rocky Rocky is offline
Senior Member
 
Join Date: Oct 2005
Posts: 551
Thanks: 14
Thanked 48 Times in 47 Posts
Default

Charles,

I need to see your mail.log file. Do the following and post the output.

tail -f /var/log/mail.log
__________________
Home of the SpamSnake
Reply With Quote
  #5  
Old 21st May 2008, 18:39
charles charles is offline
Banned
 
Join Date: Jun 2007
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Here you go. There was one legitimate internal email address in there that I changed.


May 21 11:56:37 spamsnake postfix/smtpd[6406]: lost connection after DATA (0 bytes) from unknown[85.110.30.97]
May 21 11:56:37 spamsnake postfix/cleanup[6267]: 537C628C147: message-id=<20080521155637.537C628C147@spamsnake.actiondup lication.com>
May 21 11:56:37 spamsnake postfix/qmgr[6260]: 537C628C147: from=<double-bounce@spamsnake.actionduplication.com>, size=1029, nrcpt=1 (queue active)
May 21 11:56:37 spamsnake postfix/smtpd[6406]: disconnect from unknown[85.110.30.97]
May 21 11:56:37 spamsnake postfix/smtp[6268]: 537C628C147: to=<postmaster@actionduplication.com>, orig_to=<postmaster>, relay=207.8.215.228[207.8.215.228]:25, delay=0.27, delays=0.02/0/0.02/0.22, dsn=2.6.0, status=sent (250 2.6.0 <20080521155637.537C628C147@spamsnake.actionduplic ation.com> Queued mail for delivery)
May 21 11:56:37 spamsnake postfix/qmgr[6260]: 537C628C147: removed
May 21 11:56:42 spamsnake postfix/smtpd[6263]: warning: unknown smtpd restriction: "check"
May 21 11:56:42 spamsnake postfix/smtpd[6263]: NOQUEUE: reject: RCPT from unknown[78.191.152.42]: 451 4.3.5 Server configuration error; from=<1siamu@paw.ac> to=<lcam@actionduplication.com> proto=ESMTP helo=<78.191.152.42>
Reply With Quote
  #6  
Old 21st May 2008, 19:14
Rocky Rocky is offline
Senior Member
 
Join Date: Oct 2005
Posts: 551
Thanks: 14
Thanked 48 Times in 47 Posts
Default

Charles,

There's an error in your /etc/postfix/main.cf file. The following line gives it away:
warning: unknown smtpd restriction: "check"

Post the content of your /etc/postfix/main.cf file.
__________________
Home of the SpamSnake
Reply With Quote
The Following User Says Thank You to Rocky For This Useful Post:
charles (21st May 2008)
  #7  
Old 21st May 2008, 20:33
charles charles is offline
Banned
 
Join Date: Jun 2007
Posts: 14
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Rocky,
You totally rock!! I found the problem once you pointed me in the right direction. I was missing the first underscore in "check_sender_access", that's where the "check" error was coming from.

Once I added that and restarted postfix it started working.

Thanks for your help!!!
Reply With Quote
  #8  
Old 21st May 2008, 20:43
Rocky Rocky is offline
Senior Member
 
Join Date: Oct 2005
Posts: 551
Thanks: 14
Thanked 48 Times in 47 Posts
 
Default

I'm happy you sorted it out. Good luck with you setup.
__________________
Home of the SpamSnake
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Spamsnake additional email scanners getrav HOWTO-Related Questions 4 22nd May 2008 14:16
SpamSnake Backup EMails getrav HOWTO-Related Questions 6 22nd May 2008 02:27
spamsnake installation error davy HOWTO-Related Questions 4 19th May 2008 14:05
Installing SPF-postfix in SpamSnake Howto Goose HOWTO-Related Questions 5 12th May 2008 20:36
SpamSnake as Backup MX getrav HOWTO-Related Questions 5 10th May 2008 04:01


All times are GMT +2. The time now is 21:45.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.