Spamd - service running w/ nothing happening



  • Update Okay, so I left things alone and it seems like the whitelist is working, but I am not seeing anything go to blacklist.  What is the proper way for blacklist file or site?  And how do you have it get the updated Blacklists?  Thanks!

    I'm sure someone is running spamd with 2.0 final, but I'm not having any luck seeing changes.  I did the install, then configured spamd, and I've been waiting most of the day and still have not seen anything change in the logs or seen any blacklist items.
    I went ahead and did a reinstall - here are my system logs from after that time.

    Oct 5 16:39:27 php: /pkg_edit.php: SpamD setup completed
    Oct 5 16:39:27 check_reload_status: Reloading filter
    Oct 5 16:39:27 php: /pkg_edit.php: Reconfiguring filter
    Oct 5 16:39:27 php: /pkg_edit.php: Starting spamd
    Oct 5 16:39:25 spamlogd[58933]: exiting
    Oct 5 16:39:25 spamlogd[58933]: exiting
    Oct 5 16:39:24 php: /pkg_edit.php: Stopping spamd
    Oct 5 16:39:24 php: /pkg_edit.php: Setting up spamd.conf symlink
    Oct 5 16:39:24 php: /pkg_edit.php: Restart cron
    Oct 5 16:39:24 php: /pkg_edit.php: Unlocking config
    Oct 5 16:39:24 php: /pkg_edit.php: Mounting RO
    Oct 5 16:39:24 php: /pkg_edit.php: Installing CRON
    Oct 5 16:39:24 php: /pkg_edit.php: Writing rc_file
    Oct 5 16:39:24 php: /pkg_edit.php: Looping through spamdsettings
    Oct 5 16:39:24 php: /pkg_edit.php: Creating /var/db/whitelist.txt
    Oct 5 16:39:24 php: /pkg_edit.php: Looping through each item and write out its configuration
    Oct 5 16:39:24 check_reload_status: Syncing firewall
    Oct 5 16:38:58 php: /pkg_edit.php: SpamD setup completed
    Oct 5 16:38:58 check_reload_status: Reloading filter
    Oct 5 16:38:58 php: /pkg_edit.php: Reconfiguring filter
    Oct 5 16:38:58 php: /pkg_edit.php: Starting spamd
    Oct 5 16:38:55 spamlogd[10409]: exiting
    Oct 5 16:38:55 spamlogd[10409]: exiting
    Oct 5 16:38:55 php: /pkg_edit.php: Stopping spamd
    Oct 5 16:38:55 php: /pkg_edit.php: Setting up spamd.conf symlink
    Oct 5 16:38:55 php: /pkg_edit.php: Restart cron
    Oct 5 16:38:55 php: /pkg_edit.php: Unlocking config
    Oct 5 16:38:55 php: /pkg_edit.php: Mounting RO
    Oct 5 16:38:55 php: /pkg_edit.php: Installing CRON
    Oct 5 16:38:55 php: /pkg_edit.php: Writing rc_file
    Oct 5 16:38:55 php: /pkg_edit.php: Looping through spamdsettings
    Oct 5 16:38:55 php: /pkg_edit.php: Creating /var/db/whitelist.txt
    Oct 5 16:38:55 php: /pkg_edit.php: Looping through each item and write out its configuration
    Oct 5 16:38:55 check_reload_status: Syncing firewall
    Oct 5 16:33:59 check_reload_status: Syncing firewall
    Oct 5 16:33:59 check_reload_status: Syncing firewall
    Oct 5 16:33:59 syslogd: kernel boot file is /boot/kernel/kernel
    Oct 5 16:33:59 syslogd: exiting on signal 15
    Oct 5 16:33:59 php: /pkg_mgr_install.php: The command '/usr/sbin/fifolog_create -s 32768 /var/log/spamd.log' returned exit code '1', the output was 'fifolog_create: Wrong file type: File exists'
    Oct 5 16:33:59 php: /pkg_mgr_install.php: SpamD setup completed
    Oct 5 16:33:59 check_reload_status: Reloading filter
    Oct 5 16:33:59 php: /pkg_mgr_install.php: Reconfiguring filter
    Oct 5 16:33:59 php: /pkg_mgr_install.php: Starting spamd

    I just don't know what I'm missing that could be keeping it from working - I have snort, squid, lightsquid, and darkstat running as well.

    The package logs say spamd is listening, but that's all.
    Any help would be appreciated.  I'm looking for open source options for mail filtering and this seemed like a good first step.



  • I got the OpenBSD files to download, but the other sites I have in there for spamhaus.org and spamcop don't seem to go get anything, so I'm guessing I will need to stick with file/list downloads for now.  The one thing I am not too sure on is when does the system do updates to the database or list the blacklist items?  Right now I'm seeing only whitelist numbers and 0s for blacklist.  Yesterday they were all 0s, so sometime in the evening/late the database was populated.

    Should I worry about greylist; it seems beneficial, but I'm just curious if it is going to block anything other than port 25 traffic requests.

    Thanks!


Locked