Page 1 of 1

Does this mean it is scanning outgoing mail?

Posted: Wed Dec 03, 2008 1:59 am
by Galactic Zero
Here is a line from the mail log, does this mean it is scanning outgoing mail?

Code: Select all

Dec  2 23:57:29 gz spamd[15494]: spamd: result: Y 11 - AWL,BAYES_99,DNS_FROM_RFC_BOGUSMX,MISSING_MID,RCVD_IN_SBL,
URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL scantime=0.8,size=1312,user=ekozlow@bellafinancial.com,uid=10056,required_score=4.0,
rhost=localhost.localdomain,raddr=127.0.0.1,rport=59212,mid=(unknown),bayes=1.000000,autolearn=no

Posted: Wed Dec 03, 2008 12:18 pm
by scott
It does indeed

Posted: Wed Dec 03, 2008 3:45 pm
by Galactic Zero
That confirmed what I thought, thanks. I've updated to 8.6 and I guess they changed the files for submission on port 587.

Before I think it was psa_submission and now I think it is smtp_additional. I just want to be sure this is the correct file and I've made mods to it posted below.

Code: Select all

[root@gz xinetd.d]# more smtp_additional
service submission
{
        socket_type     = stream
        protocol        = tcp
        wait            = no
        disable         = no
        user            = root
        instances       = UNLIMITED
        server          = /var/qmail/bin/tcp-env
        server_args     = -Rt0 /var/qmail/bin/relaylock /var/qmail/bin/qmail-smt
pd /var/qmail/bin/smtp_auth /var/qmail/bin/true /var/qmail/bin/cmd5checkpw /var/
qmail/bin/true
}
[root@gz xinetd.d]#
I'm trying to eleminate scanning outgoing emails and on that note is the above correct to accomplish what I'm trying?

Thanks.

Posted: Wed Dec 03, 2008 7:39 pm
by scott
Id check out the qmail-scanner website for info on that