Does this mean it is scanning outgoing mail?

Forum for getting help with Project Gamera, Spamassassin, Clamav, qmail-scanner and other anti-spam tools.
Galactic Zero
Forum Regular
Forum Regular
Posts: 471
Joined: Mon Dec 06, 2004 10:43 pm

Does this mean it is scanning outgoing mail?

Unread post by Galactic Zero »

Here is a line from the mail log, does this mean it is scanning outgoing mail?

Code: Select all

Dec  2 23:57:29 gz spamd[15494]: spamd: result: Y 11 - AWL,BAYES_99,DNS_FROM_RFC_BOGUSMX,MISSING_MID,RCVD_IN_SBL,
URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL scantime=0.8,size=1312,user=ekozlow@bellafinancial.com,uid=10056,required_score=4.0,
rhost=localhost.localdomain,raddr=127.0.0.1,rport=59212,mid=(unknown),bayes=1.000000,autolearn=no
Franklyn Halamka
Still learning my way around Linux Security.
http://www.galacticzero.net
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Unread post by scott »

It does indeed
Galactic Zero
Forum Regular
Forum Regular
Posts: 471
Joined: Mon Dec 06, 2004 10:43 pm

Unread post by Galactic Zero »

That confirmed what I thought, thanks. I've updated to 8.6 and I guess they changed the files for submission on port 587.

Before I think it was psa_submission and now I think it is smtp_additional. I just want to be sure this is the correct file and I've made mods to it posted below.

Code: Select all

[root@gz xinetd.d]# more smtp_additional
service submission
{
        socket_type     = stream
        protocol        = tcp
        wait            = no
        disable         = no
        user            = root
        instances       = UNLIMITED
        server          = /var/qmail/bin/tcp-env
        server_args     = -Rt0 /var/qmail/bin/relaylock /var/qmail/bin/qmail-smt
pd /var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /var/
qmail/bin/true
}
[root@gz xinetd.d]#
I'm trying to eleminate scanning outgoing emails and on that note is the above correct to accomplish what I'm trying?

Thanks.
Franklyn Halamka
Still learning my way around Linux Security.
http://www.galacticzero.net
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Unread post by scott »

Id check out the qmail-scanner website for info on that
Post Reply