Lot of Spam ISSUE on mail.jbindia.co.in (KLOXO)
Appearance
Lot of Spam ISSUE on mail.jbindia.co.in (KLOXO)
Many customers , eltek , jacob Ballas , Krishan maruti etc , Reported Spam increase in there mail boxes .
Issue
Spam filtering not happening after Kloxo was upgraded to 6.1.12 version Spamdyke was removed from the integration while upgrade . This the bug .
Solution
The concerned lines for spamdyke integration was manually put in /etc/xinetd.d/smtp_lxa
earlier
/var/qmail/bin/tcp-env -Rt0 /var/qmail/bin/qmail-smtpd /home/lxadmin/mail/bin/vchkpw true
Now modified to
/var/qmail/bin/tcp-env -Rt0 /usr/bin/spamdyke -f /etc/spamdyke.conf /var/qmail/bin/qmail-smtpd /home/lxadmin/mail/bin/vchkpw true
Also the /etc/spamdyke.conf file was modified to have following
######### START SPAMDYKE.CONF ######################## filter-level=normal log-level=info local-domains-file=/var/qmail/control/rcpthosts tls-certificate-file=/var/qmail/control/servercert.pem tls-level=smtp smtp-auth-command=/var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /bin/true smtp-auth-level=ondemand idle-timeout-secs=30 greeting-delay-secs=3 dns-level=aggressive reject-unresolvable-rdns reject-empty-rdns reject-ip-in-cc-rdns rdns-blacklist-file=/var/qmail/spamdyke/rdns-country-blacklist ### I cannot edit the word above, it should be (blacklist) rdns-blacklist-file=/var/qmail/spamdyke/rdns-com-blacklist rdns-blacklist-file=/var/qmail/spamdyke/rdns-net-blacklist rdns-blacklist-file=/var/qmail/spamdyke/rdns-all-blacklist reject-unresolvable-rdns dns-blacklist-entry=zen.spamhaus.org dns-blacklist-entry=dnsbl.sorbs.net dns-blacklist-entry=dul.dnsbl.sorbs.net dns-blacklist-entry=bl.spamcop.net dns-blacklist-entry=dnsbl-0.uceprotect.net dns-blacklist-entry=dnsbl-1.uceprotect.net dns-blacklist-entry=dnsbl-2.uceprotect.net dns-blacklist-entry=dnsbl-3.uceprotect.net rhs-blacklist-entry=rhsbl.sorbs.net max-recipients=25 reject-missing-sender-mx sender-whitelist-file=/var/qmail/spamdyke/sender-whitelist rdns-whitelist-file=/var/qmail/spamdyke/rdns-whitelist ip-blacklist-file=/var/qmail/spamdyke/ip-blacklist ip-in-rdns-keyword-blacklist-file=/var/qmail/spamdyke/keyword-blacklist sender-blacklist-file=/var/qmail/spamdyke/sender-blacklist recipient-blacklist-file=/var/qmail/spamdyke/recipient-blacklist-domains recipient-blacklist-file=/var/qmail/spamdyke/recipient-blacklist-emails recipient-whitelist-file=/var/qmail/spamdyke/recipient-whitelist #MySQL-Logging: config-mysql-database=spamdyke config-mysql-username=spamdyke config-mysql-password=spamdyke ######### END SPAMDYKE.CONF ########################
Testing
Check the log /var/log/kloxo/maillog for entries of spamdyke and spamd