You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Cimoni Enwis Ogwujiakwu <og...@yahoo.com> on 2010/08/25 13:22:12 UTC
Problem scanning mails with Spam Assassin on Postfix
Hello
I have a spam assassin server setup on postfix and I can scan mails from mail clients configured with the server as the smtp outgoing settings but when I change the settings to smtp.mail.yahoo.com the mail is sent without being scanned by the server and there is no log of the transcation in /var/log/maillog. The spam server is sitting in front of a firewall that redirects all port 25 traffic through it. Pleas I need assistance urgently.
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Raul Dias <ra...@dias.com.br>.
On 08/27/2010 11:54 AM, Cimoni Enwis Ogwujiakwu wrote:
>
> /C:\Documents and Settings\cee>telnet smtp.mail.yahoo.com 25
> Connecting To smtp.mail.yahoo.com...Could not open connection to the
> host, on port 25: Connect failed/
>
I get connection failures and timeout to some yahoo servers from time to
time.
Its not all yahoo servers, but random ones.
Never cared to check deeper. Just assume they need maintance as others
yahoos are fine in the meanwhile.
-Raul Dias
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Benny Pedersen <me...@junc.org>.
On fre 27 aug 2010 17:15:40 CEST, Michael Scheidell wrote
> side affect is you can't run a smtp server either.
what stopping him from add relayhost=his.isp.tld into postfix with a
smtp_sasl_password_maps ? :)
--
xpoint http://www.unicom.com/pw/reply-to-harmful.html
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Fri, 27 Aug 2010, Cimoni Enwis Ogwujiakwu wrote:
> Hello Micheal,
> But I am the ISP here. I provide internet access for subscribers and I have redirected their smtp port 25 traffic through the smtp server, but the response sent earlier when I want to connect as a test subscriber. which forum can assist?
>
> Thanks
>
> Cimoni Enwis Ogwujiakwu
If you are the ISP then you should have control over the networking. This
sounds like a problem with your networking or a problem with what ever
mechanism you are using to do that "I have redirected their smtp port"
First you should search out what ever support group there is for the
mechanism that you are using to do that smtp port redirection.
That is not a standard smtp server component and would need to be set up
carefuly, it sounds like it isn't working as expected.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Benny Pedersen <me...@junc.org>.
On fre 27 aug 2010 17:56:05 CEST, Cimoni Enwis Ogwujiakwu wrote
> Hello Micheal,
> But I am the ISP here. I provide internet access for subscribers and
> I have redirected their smtp port 25 traffic through the smtp
> server, but the response sent earlier when I want to connect as a
> test subscriber. which forum can assist?
if you are an isp why ask for help then ?, i think you need to talk to
an isp to be one :)
did you get some pappers that says how to setup explore to send mail ?
what servers or host password is mentined in it ?
no i dont need a mail account but you can use that in postfix to get
around isp limits, also if you are planning to auth more then one user
all you need is password and hostname with a working sasl auth account
not on your server
--
xpoint http://www.unicom.com/pw/reply-to-harmful.html
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Martin Gregorie <ma...@gregorie.org>.
Go and ask on the postfix users mailing list. Joining details are on the
Postfix website.
Martin
On Fri, 2010-08-27 at 11:58 -0400, Michael Scheidell wrote:
> it its a postfix problem, postfix.
>
> but if you can't telnet to yahoo on port 25, and you are the ISP,
> there are more problems than that.
>
>
> On 8/27/10 11:56 AM, Cimoni Enwis Ogwujiakwu wrote:
> > which forum can assist?
> >
>
> --
> Michael Scheidell, CTO
> o: 561-999-5000
> d: 561-948-2259
> ISN: 1259*1300
> > | SECNAP Network Security Corporation
> * Certified SNORT Integrator
> * 2008-9 Hot Company Award Winner, World Executive Alliance
> * Five-Star Partner Program 2009, VARBusiness
> * Best in Email Security,2010: Network Products Guide
> * King of Spam Filters, SC Magazine 2008
>
>
> ______________________________________________________________________
>
> This email has been scanned and certified safe by SpammerTrap®.
> For Information please see http://www.secnap.com/products/spammertrap/
>
>
> ______________________________________________________________________
>
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Michael Scheidell <mi...@secnap.com>.
it its a postfix problem, postfix.
but if you can't telnet to yahoo on port 25, and you are the ISP, there
are more problems than that.
On 8/27/10 11:56 AM, Cimoni Enwis Ogwujiakwu wrote:
> which forum can assist?
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best in Email Security,2010: Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Cimoni Enwis Ogwujiakwu <og...@yahoo.com>.
Hello Micheal,
But I am the ISP here. I provide internet access for subscribers and I have redirected their smtp port 25 traffic through the smtp server, but the response sent earlier when I want to connect as a test subscriber. which forum can assist?
Thanks
Cimoni Enwis Ogwujiakwu
--- On Fri, 8/27/10, Michael Scheidell <mi...@secnap.com> wrote:
From: Michael Scheidell <mi...@secnap.com>
Subject: Re: Problem scanning mails with Spam Assassin on Postfix
To: users@spamassassin.apache.org
Date: Friday, August 27, 2010, 5:15 PM
On 8/27/10 10:54 AM, Cimoni Enwis Ogwujiakwu wrote:
> trace route to the smtp.mail.yahoo.com and get the IP address of the server along the way as one of the hops but when I tried telneting to smtp.mail.yahoo.com I get the following
> /C:\Documents and Settings\cee>telnet smtp.mail.yahoo.com 25/
than your ISP is blocking outbound port 25.
In order to (sucessfully) run a mail server, you need to use a static, business class IP connection.
Without that, you are most likely to run into problems like DNS BL listings, DUL listings, and of course, your ISP is blocking outbound port 25 to make sure that you can't run an outbound spambot. side affect is you can't run a smtp server either.
you COULD use some of the workarounds (sending to yahoo on 587/? 465?) there are FAQ's and lots of information on the internet on doing this with postfix.
ASK IN THE POSTFIX DIRECTOR. THIS IS NOT A SPAMASSASSIN PROBLEM.
-- Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best in Email Security,2010: Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Michael Scheidell <mi...@secnap.com>.
On 8/27/10 10:54 AM, Cimoni Enwis Ogwujiakwu wrote:
> trace route to the smtp.mail.yahoo.com and get the IP address of the
> server along the way as one of the hops but when I tried telneting to
> smtp.mail.yahoo.com I get the following
> /C:\Documents and Settings\cee>telnet smtp.mail.yahoo.com 25/
than your ISP is blocking outbound port 25.
In order to (sucessfully) run a mail server, you need to use a static,
business class IP connection.
Without that, you are most likely to run into problems like DNS BL
listings, DUL listings, and of course, your ISP is blocking outbound
port 25 to make sure that you can't run an outbound spambot. side
affect is you can't run a smtp server either.
you COULD use some of the workarounds (sending to yahoo on 587/? 465?)
there are FAQ's and lots of information on the internet on doing this
with postfix.
ASK IN THE POSTFIX DIRECTOR. THIS IS NOT A SPAMASSASSIN PROBLEM.
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best in Email Security,2010: Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Cimoni Enwis Ogwujiakwu <og...@yahoo.com>.
Hello
I trace route to the smtp.mail.yahoo.com and get the IP address of the server along the way as one of the hops but when I tried telneting to smtp.mail.yahoo.com I get the following
C:\Documents and Settings\cee>telnet smtp.mail.yahoo.com 25
Connecting To smtp.mail.yahoo.com...Could not open connection to the host, on port 25: Connect failed
Cimoni Enwis Ogwujiakwu
--- On Wed, 8/25/10, Dominic Benson <do...@lenny.cus.org> wrote:
From: Dominic Benson <do...@lenny.cus.org>
Subject: Re: Problem scanning mails with Spam Assassin on Postfix
To: users@spamassassin.apache.org
Date: Wednesday, August 25, 2010, 2:02 PM
On 25/08/10 12:22, Cimoni Enwis Ogwujiakwu wrote:
Hello
I have a spam assassin server setup on postfix and I can scan mails from mail clients configured with the server as the smtp outgoing settings but when I change the settings to smtp.mail.yahoo.com the mail is sent without being scanned by the server and there is no log of the transcation in /var/log/maillog. The spam server is sitting in front of a firewall that redirects all port 25 traffic through it. Pleas I need assistance urgently.
It sounds like some part of your firewall redirection isn't working. There are three possibilities that come to mind:
1) The clients are using another port to contact smtp.mail.yahoo.com (465 or 587, for example)
2) The firewall doesn't do what you think (e.g. it doesn't match those source addresses)
3) The clients aren't going through the firewall.
For (1) Checking ports in use is trivial.
For (2) try telnetting to some server on port 25 from behind the firewall and see who HELOs
For (3) try a traceroute from one client to smtp.mail.yahoo.com to see if the firewall is one of the hops.
Hope that helps.
Dominic
Re: Problem scanning mails with Spam Assassin on Postfix
Posted by Dominic Benson <do...@lenny.cus.org>.
On 25/08/10 12:22, Cimoni Enwis Ogwujiakwu wrote:
>
> Hello
>
> I have a spam assassin server setup on postfix and I can scan
> mails from mail clients configured with the server as the
> /smtp outgoing settings /but when I change the settings to
> smtp.mail.yahoo.com the mail is sent without being scanned by
> the server and there is no log of the transcation in
> /var/log/maillog. The spam server is sitting in front of a
> firewall that redirects all port 25 traffic through it. Pleas
> I need assistance urgently.
>
>
It sounds like some part of your firewall redirection isn't working.
There are three possibilities that come to mind:
1) The clients are using another port to contact smtp.mail.yahoo.com
(465 or 587, for example)
2) The firewall doesn't do what you think (e.g. it doesn't match those
source addresses)
3) The clients aren't going through the firewall.
For (1) Checking ports in use is trivial.
For (2) try telnetting to some server on port 25 from behind the
firewall and see who HELOs
For (3) try a traceroute from one client to smtp.mail.yahoo.com to see
if the firewall is one of the hops.
Hope that helps.
Dominic