1 Topic by Cavalry

  • Cavalry
  • Member
  • Offline
  • Registered: 2015-06-04
  • Posts: 13

Topic: Blacklisted senders

==== Required information ====
- iRedMail version: 0.9.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Linux/BSD distribution name and version: Ubuntu 14.4.2
- Related log if you're reporting an issue:
====

Hi.... Blacklisted senders are not showing on the list... Can you pls help....

Thx

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blacklisted senders

Excuse me, what do you mean "showing on the list"?

Do you mean that you add new blacklist senders with iRedAdmin-Pro, but added entries are disappear?
You says you're running iRedMail-0.9.1, i guess you're running an old iRedAdmin-Pro too. Please upgrade iRedMail to the latest iRedMail-0.9.2, then upgrade iRedAdmin-Pro to the latest iRedAdmin-Pro-SQL-2.1.1.

3 Reply by Cavalry

  • Cavalry
  • Member
  • Offline
  • Registered: 2015-06-04
  • Posts: 13

Re: Blacklisted senders

Hi again,

Yes... after adding an entry I get the message successfully but the entry is missing on the list (not showing.... list is empty)...

ZhangHuangbin wrote:

Excuse me, what do you mean "showing on the list"?

Do you mean that you add new blacklist senders with iRedAdmin-Pro, but added entries are disappear?
You says you're running iRedMail-0.9.1, i guess you're running an old iRedAdmin-Pro too. Please upgrade iRedMail to the latest iRedMail-0.9.2, then upgrade iRedAdmin-Pro to the latest iRedAdmin-Pro-SQL-2.1.1.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blacklisted senders

Which page do you access to add blacklist?

1) System -> Anti Spam -> Whitelists & Blacklists
2) Domains and Accounts -> click [your_domain] to domain profile page -> tab 'White/Blacklists'

5 Reply by Cavalry (edited by Cavalry 2015-06-13 06:36:38)

  • Cavalry
  • Member
  • Offline
  • Registered: 2015-06-04
  • Posts: 13

Re: Blacklisted senders

ZhangHuangbin wrote:

Which page do you access to add blacklist?

1) System -> Anti Spam -> Whitelists & Blacklists
2) Domains and Accounts -> click [your_domain] to domain profile page -> tab 'White/Blacklists'

Hi again...

Both of them are not working... the only way to add is from add->whitelists & blacklists(they are not showing in this list) and then check System -> Anti Spam -> Whitelists & Blacklists (they are showing only in this list)...

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blacklisted senders

Could you please try the latest iRedAdmin-Pro-SQL? v2.1.1.

7 Reply by romanmm

  • romanmm
  • Member
  • Offline
  • Registered: 2015-01-29
  • Posts: 31

Re: Blacklisted senders

==== Required information ====
- iRedMail version: 0.9.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): v2.1.2 (MySQL)
- Web server (Apache or Nginx): Apache
- Linux/BSD distribution name and version: CentOS 6.5
- Related log if you're reporting an issue:
====

Hi,

I think I met the same issue. See my admin log:
2015-06-21 09:12:41    postmaster@<domain3>    <IP>    Add blacklists for ny2shea@stny.rr.com: @.<domain1>, @.<domain2>.

But I can 't found this in any place in GUI.

Roman

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blacklisted senders

Hi Roman,

*) Could you please turn on debug mode in iRedAPD, and show me detailed log in /var/log/iredapd.log related to this blacklisted sender(s) (when you received any email sent by them)?
*) Show me output of below command:

# grep 'plugins' /opt/iredapd/settings.py

9 Reply by romanmm

  • romanmm
  • Member
  • Offline
  • Registered: 2015-01-29
  • Posts: 31

Re: Blacklisted senders

ZhangHuangbin wrote:

Hi Roman,

*) Could you please turn on debug mode in iRedAPD, and show me detailed log in /var/log/iredapd.log related to this blacklisted sender(s) (when you received any email sent by them)?
*) Show me output of below command:

# grep 'plugins' /opt/iredapd/settings.py

Hi,

I put iredapd into debug mode (log_level = "debug"), restarted it (/etc/init.d/iredapd restart)  but still see nothing in its log even if mails flow through the system:
==> /var/log/iredapd.log <==
2015-06-21 03:44:18 INFO Starting iRedAPD (version: 1.6.0, backend: mysql), listening on 127.0.0.1:7777.
2015-06-21 03:44:18 INFO Loading plugin: reject_null_sender
2015-06-21 03:44:18 INFO Loading plugin: amavisd_message_size_limit
2015-06-21 03:44:18 INFO Loading plugin: amavisd_wblist
2015-06-21 03:44:18 INFO Loading plugin: sql_alias_access_policy
2015-06-21 14:37:55 INFO Starting iRedAPD (version: 1.6.0, backend: mysql), listening on 127.0.0.1:7777.
2015-06-21 14:37:55 INFO Loading plugin: reject_null_sender
2015-06-21 14:37:55 INFO Loading plugin: amavisd_message_size_limit
2015-06-21 14:37:55 INFO Loading plugin: amavisd_wblist
2015-06-21 14:37:55 INFO Loading plugin: sql_alias_access_policy

# grep 'plugins' /opt/iredapd/settings.py
plugins = ["reject_null_sender", "amavisd_message_size_limit", "amavisd_wblist", "sql_alias_access_policy"]

# netstat -antp | grep 7777
tcp        0      0 127.0.0.1:7777              0.0.0.0:*                   LISTEN      378/python

It's the only row that has port 7777 in it (commented):
# grep 7777 /etc/postfix/main.cf
#smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777, check_policy_service inet:127.0.0.1:10031,

May be iredapd doesn't work at all?

Regards,
Roman

10 Reply by romanmm

  • romanmm
  • Member
  • Offline
  • Registered: 2015-01-29
  • Posts: 31

Re: Blacklisted senders

So I uncommented the row in main.conf file and now I see that iredapd starts working.

==> /var/log/iredapd.log <==
2015-06-21 14:59:12 DEBUG Connect from 127.0.0.1, port 50104.
2015-06-21 14:59:12 DEBUG smtp session: request=smtpd_access_policy
2015-06-21 14:59:12 DEBUG smtp session: protocol_state=END-OF-MESSAGE
2015-06-21 14:59:12 DEBUG smtp session: protocol_name=ESMTP
2015-06-21 14:59:12 DEBUG smtp session: client_address=185.5.136.96
2015-06-21 14:59:12 DEBUG smtp session: client_name=f425.i.mail.ru
2015-06-21 14:59:12 DEBUG smtp session: reverse_client_name=f425.i.mail.ru
2015-06-21 14:59:12 DEBUG smtp session: helo_name=f425.i.mail.ru
2015-06-21 14:59:12 DEBUG smtp session: sender=pec-alina@mail.ru
2015-06-21 14:59:12 DEBUG smtp session: recipient=reginal@ichilovtop.com
2015-06-21 14:59:12 DEBUG smtp session: recipient_count=1
2015-06-21 14:59:12 DEBUG smtp session: queue_id=34ECC40369
2015-06-21 14:59:12 DEBUG smtp session: instance=24b.5586a710.29f50.0
2015-06-21 14:59:12 DEBUG smtp session: size=16835
2015-06-21 14:59:12 DEBUG smtp session: etrn_domain=
2015-06-21 14:59:12 DEBUG smtp session: stress=
2015-06-21 14:59:12 DEBUG smtp session: sasl_method=
2015-06-21 14:59:12 DEBUG smtp session: sasl_username=
2015-06-21 14:59:12 DEBUG smtp session: sasl_sender=
2015-06-21 14:59:12 DEBUG smtp session: ccert_subject=
2015-06-21 14:59:12 DEBUG smtp session: ccert_issuer=
2015-06-21 14:59:12 DEBUG smtp session: ccert_fingerprint=
2015-06-21 14:59:12 DEBUG smtp session: ccert_pubkey_fingerprint=
2015-06-21 14:59:12 DEBUG smtp session: encryption_protocol=TLSv1.2
2015-06-21 14:59:12 DEBUG smtp session: encryption_cipher=ECDHE-RSA-AES256-GCM-SHA384
2015-06-21 14:59:12 DEBUG smtp session: encryption_keysize=256
2015-06-21 14:59:12 DEBUG Skip plugin: reject_null_sender (protocol_state != END-OF-MESSAGE)
2015-06-21 14:59:12 DEBUG --> Apply plugin: amavisd_message_size_limit
2015-06-21 14:59:12 DEBUG Message size: 16835
2015-06-21 14:59:12 DEBUG Getting applicable policies
2015-06-21 14:59:12 DEBUG Valid policy accounts for recipient reginal@ichilovtop.com: 'reginal@ichilovtop.com', '@ichilovtop.com', '@.ichilovtop.com', '@.'
2015-06-21 14:59:12 DEBUG SELECT policy_name,message_size_limit
                 FROM users, policy
                 WHERE
                    (users.policy_id=policy.id)
                    AND (users.email IN ('reginal@ichilovtop.com', '@ichilovtop.com', '@.ichilovtop.com', '@.'))
                 ORDER BY users.priority DESC

2015-06-21 14:59:12 DEBUG SKIP: policy_name @., no valid message_size_limit: None
2015-06-21 14:59:12 DEBUG <-- Result: DUNNO
2015-06-21 14:59:12 DEBUG Skip plugin: amavisd_wblist (protocol_state != END-OF-MESSAGE)
2015-06-21 14:59:12 DEBUG Skip plugin: sql_alias_access_policy (protocol_state != END-OF-MESSAGE)
2015-06-21 14:59:12 INFO [185.5.136.96] END-OF-MESSAGE, pec-alina@mail.ru -> reginal@ichilovtop.com, DUNNO
2015-06-21 14:59:12 DEBUG Session ended

I don't know why there was a comment sign and I don't remember that I put it there. I will try to check my backups.

Roman


romanmm wrote:
ZhangHuangbin wrote:

Hi Roman,

*) Could you please turn on debug mode in iRedAPD, and show me detailed log in /var/log/iredapd.log related to this blacklisted sender(s) (when you received any email sent by them)?
*) Show me output of below command:

# grep 'plugins' /opt/iredapd/settings.py

Hi,

I put iredapd into debug mode (log_level = "debug"), restarted it (/etc/init.d/iredapd restart)  but still see nothing in its log even if mails flow through the system:
==> /var/log/iredapd.log <==
2015-06-21 03:44:18 INFO Starting iRedAPD (version: 1.6.0, backend: mysql), listening on 127.0.0.1:7777.
2015-06-21 03:44:18 INFO Loading plugin: reject_null_sender
2015-06-21 03:44:18 INFO Loading plugin: amavisd_message_size_limit
2015-06-21 03:44:18 INFO Loading plugin: amavisd_wblist
2015-06-21 03:44:18 INFO Loading plugin: sql_alias_access_policy
2015-06-21 14:37:55 INFO Starting iRedAPD (version: 1.6.0, backend: mysql), listening on 127.0.0.1:7777.
2015-06-21 14:37:55 INFO Loading plugin: reject_null_sender
2015-06-21 14:37:55 INFO Loading plugin: amavisd_message_size_limit
2015-06-21 14:37:55 INFO Loading plugin: amavisd_wblist
2015-06-21 14:37:55 INFO Loading plugin: sql_alias_access_policy

# grep 'plugins' /opt/iredapd/settings.py
plugins = ["reject_null_sender", "amavisd_message_size_limit", "amavisd_wblist", "sql_alias_access_policy"]

# netstat -antp | grep 7777
tcp        0      0 127.0.0.1:7777              0.0.0.0:*                   LISTEN      378/python

It's the only row that has port 7777 in it (commented):
# grep 7777 /etc/postfix/main.cf
#smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:7777, check_policy_service inet:127.0.0.1:10031,

May be iredapd doesn't work at all?

Regards,
Roman

11 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blacklisted senders

You should add 'check_policy_service inet:127.0.0.1:7777' in Postfix parameter 'smtpd_recipient_restrictions' like this:

smtpd_recipient_restrictions = ..., check_policy_service inet:127.0.0.1:7777, permit_mynetworks, ...