server.tab CustMapsList

[Emmanuel Gonzalez]

                               Hi there,
 

To filter a bit the spam, I'm using this CustMapsList (but I'm not satisfied
at all with my list.)

 

"CustMapsList"
"sbl-xbl.spamhaus.org.:0,combined.njabl.org.:0,bl.spamcop.net.:0"

 

Anyone has a better list to give me or complete?

 

Best,

 

Emmanuel

 

CEO - SITUP WEB DESIGN

 

 ----------.oOo.----------
|    SITUP Web Design     |
|  18, chemin des sables  |   -----------=/\=-----------
|  06160 Juan les Pins    |  | Phone : [phone]  |
|        FRANCE           |  | Fax   : [phone]  |
 ----------.oOo.----------    -----------=\/=-----------

 



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Francesco Vertova]

At 11.35 07/11/07, you wrote:

>To filter a bit the spam, I'm using this CustMapsList (but I'm not satisfied
>at all with my list.)
>
>"CustMapsList"
>"sbl-xbl.spamhaus.org.:0,combined.njabl.org.:0,bl.spamcop.net.:0"
>
>Anyone has a better list to give me or complete?

It depends on the reasons why you are unsatisfied ... my list is
similar to yours:

zen.spamhaus.org:0,bl.spamcop.net:0,dnsbl.njabl.org:0,prc.tqmcube.com:0,ko.tqmcube.com:0,blackholes.five-ten-sg.com:-30,dnsbl.sorbs.net:-30

As a second line of defence I have glst, and as a third line a few
formal checks on the HELO. Besides spammers.tab etc. of course.

Some remarks

zen is more comprehensive than sbl-xbl, it replaces
dynablock.njabl.org that has closed. Since dynablock has closed,
combined.njabl is now just a copy of dnsbl.njabl.

The tqmcube things are geographic blocks against Korea and People's
Republic of China, good for me, may be bad for you.

The last two are too aggressive for blocking. With spamhaus I've had
0,00 false positives since I use XMail, with spamcop no false
positives for at least a couple of years. spamhaus has become very
effective, too, indeed it alone catches 90% junk, at least, with
tqmcube being the second catcher and spamcop the third.

Maybe I should cut my list b/c I suspect it's a bit too long (too
many lists to query for each mail). In that case I would scale down to:

zen.spamhaus.org:0,bl.spamcop.net:0,prc.tqmcube.com:0,ko.tqmcube.com:0

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Emmanuel Gonzalez]

Thanks a lot Francesco !

-----Message d'origine-----
De=A0: xmail-bounce@... =
[mailto:xmail-bounce@...] De
la part de Francesco Vertova
Envoy=E9=A0: mercredi 7 novembre 2007 12:57
=C0=A0: xmail@...
Objet=A0: [xmail] Re: server.tab CustMapsList

At 11.35 07/11/07, you wrote:

>To filter a bit the spam, I'm using this CustMapsList (but I'm not
satisfied
>at all with my list.)
>
>"CustMapsList"
>"sbl-xbl.spamhaus.org.:0,combined.njabl.org.:0,bl.spamcop.net.:0"
>
>Anyone has a better list to give me or complete?

It depends on the reasons why you are unsatisfied ... my list is=20
similar to yours:

zen.spamhaus.org:0,bl.spamcop.net:0,dnsbl.njabl.org:0,prc.tqmcube.com:0,k=
o.t
qmcube.com:0,blackholes.five-ten-sg.com:-30,dnsbl.sorbs.net:-30

As a second line of defence I have glst, and as a third line a few=20
formal checks on the HELO. Besides spammers.tab etc. of course.

Some remarks

zen is more comprehensive than sbl-xbl, it replaces=20
dynablock.njabl.org that has closed. Since dynablock has closed,=20
combined.njabl is now just a copy of dnsbl.njabl.

The tqmcube things are geographic blocks against Korea and People's=20
Republic of China, good for me, may be bad for you.

The last two are too aggressive for blocking. With spamhaus I've had=20
0,00 false positives since I use XMail, with spamcop no false=20
positives for at least a couple of years. spamhaus has become very=20
effective, too, indeed it alone catches 90% junk, at least, with=20
tqmcube being the second catcher and spamcop the third.

Maybe I should cut my list b/c I suspect it's a bit too long (too=20
many lists to query for each mail). In that case I would scale down to:

zen.spamhaus.org:0,bl.spamcop.net:0,prc.tqmcube.com:0,ko.tqmcube.com:0

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Edinilson - ATINET]

Here we are using:
"CustMapsList"
"zen.spamhaus.org.:0,dsn.rfc-ignorant.org.:0,bl.spamcop.net.:0"

BUT we are having too many
'551 Server access forbidden by your IP'

*even* with authenticated users (yes, I´m sure they are authenticated).

At this moment we could not solve this problem.

ps: XMail 1.25-Win32 on Windows 2000 Server
Edinilson
---------------------------------------------------------
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


----- Original Message -----
From: "Emmanuel Gonzalez" <gonzalez@...>
To: <xmail@...>
Sent: Wednesday, 7 de November de 2007 08:35
Subject: [xmail] server.tab CustMapsList


                               Hi there,


To filter a bit the spam, I'm using this CustMapsList (but I'm not satisfied
at all with my list.)



"CustMapsList"
"sbl-xbl.spamhaus.org.:0,combined.njabl.org.:0,bl.spamcop.net.:0"



Anyone has a better list to give me or complete?



Best,



Emmanuel



CEO - SITUP WEB DESIGN



 ----------.oOo.----------
|    SITUP Web Design     |
|  18, chemin des sables  |   -----------=/\=-----------
|  06160 Juan les Pins    |  | Phone : [phone]  |
|        FRANCE           |  | Fax   : [phone]  |
 ----------.oOo.----------    -----------=\/=-----------





-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Edinilson - ATINET]

I need some help in how to understand what exactly is happening with our
XMail server.

Here we are using in server.tab:
"CustMapsList"
"zen.spamhaus.org.:0,dsn.rfc-ignorant.org.:0,bl.spamcop.net.:0"

but some blacklisted ips are getting too many
'551 Server access forbidden by your IP'

If they retries for 2 or 3 times, the message was sent.

We tried to do not use CustMapsList but the number of spams increase too
much.

I´m looking for a program that simulates a MUA and returns all messages that
was returned by XMail Server (not via telnet because an user will do that).

Any help will be welcome.

Regards

Edinilson
---------------------------------------------------------
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br 

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Francesco Vertova]

At 17.03 08/11/07, Edinilson - ATINET wrote:

>Here we are using:
>"CustMapsList"
>"zen.spamhaus.org.:0,dsn.rfc-ignorant.org.:0,bl.spamcop.net.:0"
>
>BUT we are having too many
>'551 Server access forbidden by your IP'
>
>*even* with authenticated users (yes, I=B4m sure they are authenticated).

The default error message from CustMapsList=20
should be "550 Denied due inclusion of your IP in=20
the following map (map name)". Even if you=20
changed the SmtpMsgIPBanMaps server.tab variable,=20
the error message should always include the map name.

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Edinilson - ATINET]

So, in which situation '551 Server access forbidden by your IP' is returned?

Because, if I comment CustMapsList line, users can send without problems.

Regards

Edinilson
---------------------------------------------------------
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


----- Original Message -----
From: "Francesco Vertova" <vertova@...>
To: <xmail@...>
Sent: Thursday, 8 de November de 2007 14:19
Subject: [xmail] Re: server.tab CustMapsList


At 17.03 08/11/07, Edinilson - ATINET wrote:

>Here we are using:
>"CustMapsList"
>"zen.spamhaus.org.:0,dsn.rfc-ignorant.org.:0,bl.spamcop.net.:0"
>
>BUT we are having too many
>'551 Server access forbidden by your IP'
>
>*even* with authenticated users (yes, I=B4m sure they are authenticated).

The default error message from CustMapsList=20
should be "550 Denied due inclusion of your IP in=20
the following map (map name)". Even if you=20
changed the SmtpMsgIPBanMaps server.tab variable,=20
the error message should always include the map name.

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Francesco Vertova]

At 17.26 08/11/07, you wrote:

>So, in which situation '551 Server access forbidden by your IP' is returned?

I think it's a sort of default error message. Usually from
smtp.ipmap.tab, since the other IP-based blocks (CustMapsList and
spammers.tab) have their own messages.

>Because, if I comment CustMapsList line, users can send without problems.

SmtpMsgIPBanMaps set to an empty string? or a server.tab syntax
error? Real [TAB]s etc.?

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Edinilson - ATINET]

Here we are using:
#"SmtpMsgIPBanSpammers" "550 Denied due inclusion of your IP in our spam
lists"
#"SmtpMsgIPBanSpamAddress" "550 Denied due inclusion of your email address
in our spam lists"
#"SmtpMsgIPBanMaps" "550 Denied due inclusion of your IP in the following
map"
#"CustomSMTPMessage" "Please open
http://www.xmailserver.test/smtp_errors.html to get more information about
this error"

Regards

Edinilson
---------------------------------------------------------
ATINET-Professional Web Hosting
Tel Voz: (0xx11) 4412-0876
http://www.atinet.com.br


----- Original Message -----
From: "Francesco Vertova" <vertova@...>
To: <xmail@...>
Sent: Thursday, 8 de November de 2007 15:04
Subject: [xmail] Re: server.tab CustMapsList


At 17.26 08/11/07, you wrote:

>So, in which situation '551 Server access forbidden by your IP' is
>returned?

I think it's a sort of default error message. Usually from
smtp.ipmap.tab, since the other IP-based blocks (CustMapsList and
spammers.tab) have their own messages.

>Because, if I comment CustMapsList line, users can send without problems.

SmtpMsgIPBanMaps set to an empty string? or a server.tab syntax
error? Real [TAB]s etc.?

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Francesco Vertova]

At 18.46 08/11/07, you wrote:

>Here we are using:
>#"SmtpMsgIPBanMaps" "550 Denied due inclusion of your IP in the following
>map"

With that entry commented out, the peer should get a "550 Denied due
inclusion of your IP inside (map name)", besides the usual
"SNDRIP=EIPMAP (map name)" in the SMTP log. If you don't get either,
and there is no config error somewhere, I think the rejection is not
due to an IP map. What do the SMTP log and a TCP dump show?

Ciao, Francesco

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Davide Libenzi]

On Thu, 8 Nov 2007, Edinilson - ATINET wrote:

> I need some help in how to understand what exactly is happening with our
> XMail server.
>
> Here we are using in server.tab:
> "CustMapsList"
> "zen.spamhaus.org.:0,dsn.rfc-ignorant.org.:0,bl.spamcop.net.:0"
>
> but some blacklisted ips are getting too many
> '551 Server access forbidden by your IP'

The only way to get thise error with a zero code (":0") in the map, is
because they do not authenticate correctly (or at all).


- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to ecartis@...
For general help: send the line "help" in the body of a message to
ecartis@...

[Scott Anketell]

Hi,

Since there is no facility within XMail to prevent all bounce-messages,
I need a filter, script or something that will do it for us.

Any tips/pointers on where to start are appreciated (not sure the best
way to do it).  Unfortunately the PHP based script/filter on the XMail
forums does not appear to work for us.  It's a Windows box with
ActivePerl installed, so any default 'Windows script' or Perl would be
fine to use.

I hope that it should not be too hard to do - check all outbound mail
and if the sender is the local server and the subject contains "Error
sending Message" to drop the mail.

The adverse consequences of "Poor" reputation on SenderBase, due to the
server(s) bouncing NDR messages (spam bouncing to spoofed addresses) is
far greater than missing a few valid 'Error sending message' may be
generated.  Not being able to send/receive email to/from the largest
companies and ISP's in the country, does not compare to the the handful
of of legitimate 'Mail box full' messages that would otherwise be
useful.  Our servers are not used for spam and SenderBase have confirmed
that the bounced NDR's are the cause of the problem, so we need a way to
stop them.

Thanks for any  help and pointers.
Regards,
Scott
_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail

[Davide Libenzi]

On Tue, 7 Jul 2009, Scott wrote:

> Hi,
>
> Since there is no facility within XMail to prevent all bounce-messages, I need
> a filter, script or something that will do it for us.
>
> Any tips/pointers on where to start are appreciated (not sure the best way to
> do it).  Unfortunately the PHP based script/filter on the XMail forums does
> not appear to work for us.  It's a Windows box with ActivePerl installed, so
> any default 'Windows script' or Perl would be fine to use.
>
> I hope that it should not be too hard to do - check all outbound mail and if
> the sender is the local server and the subject contains "Error sending
> Message" to drop the mail.
>
> The adverse consequences of "Poor" reputation on SenderBase, due to the
> server(s) bouncing NDR messages (spam bouncing to spoofed addresses) is far
> greater than missing a few valid 'Error sending message' may be generated.
> Not being able to send/receive email to/from the largest companies and ISP's
> in the country, does not compare to the the handful of of legitimate 'Mail box
> full' messages that would otherwise be useful.  Our servers are not used for
> spam and SenderBase have confirmed that the bounced NDR's are the cause of the
> problem, so we need a way to stop them.

Doesn't a catch-all alias directed to a given trash account, work for you?



- Davide


_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail

[Scott Anketell]

Hi Davide,

That's one of the suggestions that SenderBase offered, however with 200+
mail-domains (some with domain-wide catch-all and some without) it's not
possible.

The only other suggestion that SenderBase made is to send the NDR's from
a ""sacrificial lamb IP" that would be different from the normal
sending-IP, but XMail cannot do that.

Any other ideas are most welcome, but the only two remaining options I
can think of is to to prevent all bounce-messages, or find new mail
server software.  Out of those two suggestions I very much hope it's
possible to stop the NDR's.

Regards,
Scott



On 7/07/2009 10:16 AM, Davide Libenzi wrote:

> On Tue, 7 Jul 2009, Scott wrote:
>
>    
>> Hi,
>>
>> Since there is no facility within XMail to prevent all bounce-messages, I need
>> a filter, script or something that will do it for us.
>>
>> Any tips/pointers on where to start are appreciated (not sure the best way to
>> do it).  Unfortunately the PHP based script/filter on the XMail forums does
>> not appear to work for us.  It's a Windows box with ActivePerl installed, so
>> any default 'Windows script' or Perl would be fine to use.
>>
>> I hope that it should not be too hard to do - check all outbound mail and if
>> the sender is the local server and the subject contains "Error sending
>> Message" to drop the mail.
>>
>> The adverse consequences of "Poor" reputation on SenderBase, due to the
>> server(s) bouncing NDR messages (spam bouncing to spoofed addresses) is far
>> greater than missing a few valid 'Error sending message' may be generated.
>> Not being able to send/receive email to/from the largest companies and ISP's
>> in the country, does not compare to the the handful of of legitimate 'Mail box
>> full' messages that would otherwise be useful.  Our servers are not used for
>> spam and SenderBase have confirmed that the bounced NDR's are the cause of the
>> problem, so we need a way to stop them.
>>      
>
> Doesn't a catch-all alias directed to a given trash account, work for you?
>
>
>
> - Davide
>
>
> _______________________________________________
> xmail mailing list
> xmail@...
> http://xmailserver.org/mailman/listinfo/xmail
>
>    

_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail

[xmail_list]

Hi Scott,

and hello to everybody else, because this is my first post here :-)

My XMail also uses a Windows machine and I use custom filters for
several things. It's easier than it seems: You can use every script that
your windows machine can parse and even executables if they give back
their results using STDOUT (command line style).

I have used VB Script, WSH and even .NET command line executables. An
example:

My filter.post-data.tab has a line:

"d:\MailRoot\filters\RecipientFilter\RecipientName.exe"    "@@FILE"    
"@@FROM"    "@@CRCPT"    "@@USERAUTH"    "@@REMOTEADDR"

RecipientName.exe is my .NET command line executable, which parses the
incoming parameters and logs the sender/recipient and headers of
incoming and outgoing mails to a mySQL database. It was a simple VB
Script before I decided to use an executable to have something I can
properly debug. ;-)

Additionally, my filter can reject a message without sending a
notification/bounce to the sender. You can do this by simply returning
'3' from the filter. If you add '16' to the return value, so you get
'19', you can stop processing of any following filters in filter*.tab file.


 From Xmailserver README.TXT:

Filter commands have the ability to inspect and modify the content of
    the message (or info) file. The exit code of commands executed by XMail
    are used to tell XMail the action that has to be performed as a
    consequence of the filter. The exit code is composed by a raw exit code
    and additional flags. Currently defined flags are:

    '16' Stop selected filter list processing.

Currently defined raw exit codes are:

    '3' Reject the message.

When rejecting the message, the filter command has the ability to
specify the SMTP status code that
XMail will send to the remote SMTP client, by creating a file named
$(FILE).rej containing the message
in the very first line. Such file will be automatically removed by XMail.


See MESSAGE FILTERS section for further details.


Regards,

Mathias Wührmann
FLEXact


Scott schrieb:

> Hi,
>
> Since there is no facility within XMail to prevent all
> bounce-messages, I need a filter, script or something that will do it
> for us.
>
> Any tips/pointers on where to start are appreciated (not sure the best
> way to do it).  Unfortunately the PHP based script/filter on the XMail
> forums does not appear to work for us.  It's a Windows box with
> ActivePerl installed, so any default 'Windows script' or Perl would be
> fine to use.
>
> I hope that it should not be too hard to do - check all outbound mail
> and if the sender is the local server and the subject contains "Error
> sending Message" to drop the mail.
>
> The adverse consequences of "Poor" reputation on SenderBase, due to
> the server(s) bouncing NDR messages (spam bouncing to spoofed
> addresses) is far greater than missing a few valid 'Error sending
> message' may be generated.  Not being able to send/receive email
> to/from the largest companies and ISP's in the country, does not
> compare to the the handful of of legitimate 'Mail box full' messages
> that would otherwise be useful.  Our servers are not used for spam and
> SenderBase have confirmed that the bounced NDR's are the cause of the
> problem, so we need a way to stop them.
>
> Thanks for any  help and pointers.
> Regards,
> Scott
> _______________________________________________
> xmail mailing list
> xmail@...
> http://xmailserver.org/mailman/listinfo/xmail
>

_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail

[Scott Anketell]

Hi again Davide an others,

Is it possible for XMail to send or relay outgoing mail from only one
specific local domain via another server?

The server's 'RootDomain' is not used to send or receive normal-email,
but it is responsible for all the NDR's that cause the SenderBase
reputation problem.
Could I configure XMail (either via SMTPGW.TAB or SMTPFWD.TAB) to send
all outbound mail from only the 'RootDomain' via another server?
Obviously that other server would then have a reputation problem but all
the other local domains on the main server would be fine.

Reading the XMail documents it says that SMTPGW.TAB or SMTPFWD.TAB can
be used to send all mail FOR a specific domain via the other server, not
all mail FROM a specific domain, so I'm not sure if it would work or not?

Thanks,
Scott


On 7/07/2009 10:16 AM, Davide Libenzi wrote:

> On Tue, 7 Jul 2009, Scott wrote:
>
>    
>> Hi,
>>
>> Since there is no facility within XMail to prevent all bounce-messages, I need
>> a filter, script or something that will do it for us.
>>
>> Any tips/pointers on where to start are appreciated (not sure the best way to
>> do it).  Unfortunately the PHP based script/filter on the XMail forums does
>> not appear to work for us.  It's a Windows box with ActivePerl installed, so
>> any default 'Windows script' or Perl would be fine to use.
>>
>> I hope that it should not be too hard to do - check all outbound mail and if
>> the sender is the local server and the subject contains "Error sending
>> Message" to drop the mail.
>>
>> The adverse consequences of "Poor" reputation on SenderBase, due to the
>> server(s) bouncing NDR messages (spam bouncing to spoofed addresses) is far
>> greater than missing a few valid 'Error sending message' may be generated.
>> Not being able to send/receive email to/from the largest companies and ISP's
>> in the country, does not compare to the the handful of of legitimate 'Mail box
>> full' messages that would otherwise be useful.  Our servers are not used for
>> spam and SenderBase have confirmed that the bounced NDR's are the cause of the
>> problem, so we need a way to stop them.
>>      
>
> Doesn't a catch-all alias directed to a given trash account, work for you?
>
>
>
> - Davide
>
>
> _______________________________________________
> xmail mailing list
> xmail@...
> http://xmailserver.org/mailman/listinfo/xmail
>
>    

_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail

[Davide Libenzi]

On Mon, 13 Jul 2009, Scott wrote:

> Hi again Davide an others,
>
> Is it possible for XMail to send or relay outgoing mail from only one specific
> local domain via another server?
>
> The server's 'RootDomain' is not used to send or receive normal-email, but it
> is responsible for all the NDR's that cause the SenderBase reputation problem.
> Could I configure XMail (either via SMTPGW.TAB or SMTPFWD.TAB) to send all
> outbound mail from only the 'RootDomain' via another server?
> Obviously that other server would then have a reputation problem but all the
> other local domains on the main server would be fine.
>
> Reading the XMail documents it says that SMTPGW.TAB or SMTPFWD.TAB can be used
> to send all mail FOR a specific domain via the other server, not all mail FROM
> a specific domain, so I'm not sure if it would work or not?

XMail does not have a built-in way to do that. You could probably do that
with some hack and filters, but not directly.



- Davide


_______________________________________________
xmail mailing list
xmail@...
http://xmailserver.org/mailman/listinfo/xmail