Lot of Spam ISSUE on mail.jbindia.co.in (KLOXO)

Lot of Spam ISSUE on mail.jbindia.co.in (KLOXO)

Many customers , eltek , jacob Ballas , Krishan maruti etc , Reported Spam increase in there mail boxes .

Issue

Spam filtering not happening after Kloxo was upgraded to 6.1.12 version Spamdyke was removed from the integration while upgrade . This the bug .

Solution

The concerned lines for spamdyke integration was manually put in /etc/xinetd.d/smtp_lxa

earlier

/var/qmail/bin/tcp-env -Rt0 /var/qmail/bin/qmail-smtpd /home/lxadmin/mail/bin/vchkpw true

Now modified to

/var/qmail/bin/tcp-env -Rt0 /usr/bin/spamdyke -f /etc/spamdyke.conf /var/qmail/bin/qmail-smtpd /home/lxadmin/mail/bin/vchkpw true

Also the /etc/spamdyke.conf file was modified to have following

######### START SPAMDYKE.CONF ########################
filter-level=normal
log-level=info
local-domains-file=/var/qmail/control/rcpthosts
tls-certificate-file=/var/qmail/control/servercert.pem
tls-level=smtp
smtp-auth-command=/var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /bin/true
smtp-auth-level=ondemand
idle-timeout-secs=30
greeting-delay-secs=3
dns-level=aggressive
reject-unresolvable-rdns
reject-empty-rdns
reject-ip-in-cc-rdns
rdns-blacklist-file=/var/qmail/spamdyke/rdns-country-blacklist
### I cannot edit the word above, it should be (blacklist)
rdns-blacklist-file=/var/qmail/spamdyke/rdns-com-blacklist
rdns-blacklist-file=/var/qmail/spamdyke/rdns-net-blacklist
rdns-blacklist-file=/var/qmail/spamdyke/rdns-all-blacklist 
reject-unresolvable-rdns
dns-blacklist-entry=zen.spamhaus.org
dns-blacklist-entry=bl.barracudacentral.org
dns-blacklist-entry=dul.dnsbl.sorbs.net
dns-blacklist-entry=bl.spamcop.net
dns-blacklist-entry=dnsbl-0.uceprotect.net
dns-blacklist-entry=dnsbl-1.uceprotect.net
dns-blacklist-entry=dnsbl-2.uceprotect.net
dns-blacklist-entry=dnsbl-3.uceprotect.net
rhs-blacklist-entry=rhsbl.sorbs.net
max-recipients=25
reject-missing-sender-mx
sender-whitelist-file=/var/qmail/spamdyke/sender-whitelist
rdns-whitelist-file=/var/qmail/spamdyke/rdns-whitelist
ip-blacklist-file=/var/qmail/spamdyke/ip-blacklist
ip-in-rdns-keyword-blacklist-file=/var/qmail/spamdyke/keyword-blacklist
sender-blacklist-file=/var/qmail/spamdyke/sender-blacklist
recipient-blacklist-file=/var/qmail/spamdyke/recipient-blacklist-domains
recipient-blacklist-file=/var/qmail/spamdyke/recipient-blacklist-emails
recipient-whitelist-file=/var/qmail/spamdyke/recipient-whitelist
#MySQL-Logging:
config-mysql-database=spamdyke
config-mysql-username=spamdyke
config-mysql-password=spamdyke 
######### END SPAMDYKE.CONF ########################

Testing

Check the log /var/log/kloxo/maillog for entries of spamdyke and spamd