Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SpamD Package Needs Testers

    pfSense Packages
    13
    80
    32.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      Knobee
      last edited by

      I think that there may be an error in parsing "bad" e-mail addresses when displaying the SpamD database:

      I'm seeing the following when "sorting by Attempts":

      | Type | IP | From | To | Attempts  ↑ |
      | GREY | 77.205.81.230 | | ty{n2000@HECOUNCIL.ORG> | 1209078047 |
      | GREY | 83.9.63.26 | <martac-ti|< td=""></martac-ti|<> | {pyr@AOLLC.COM> | 1209076738 |

      Knobee

      1 Reply Last reply Reply Quote 0
      • S
        sullrich
        last edited by

        @Knobee:

        I think that there may be an error in parsing "bad" e-mail addresses when displaying the SpamD database:

        I'm seeing the following when "sorting by Attempts":

        | Type | IP | From | To | Attempts  ↑ |
        | GREY | 77.205.81.230 | | ty{n2000@HECOUNCIL.ORG> | 1209078047 |
        | GREY | 83.9.63.26 | <martac-ti|< td=""></martac-ti|<> | {pyr@AOLLC.COM> | 1209076738 |

        Knobee

        It's a known issue when someone puts a | in the email address.

        1 Reply Last reply Reply Quote 0
        • S
          sullrich
          last edited by

          @submicron:

          @blueivy:

          ===
          javascript:toggle_on("d24", "/themes/nervecenter/images/icons/icon_x_p.gif");getURL("spamd_db.php?buttonid=d24&srcip=''''catchallATblueivy.co.uk''''&action=delete", outputrule);'

          It's got something to do with the quotes around \catchallATblueivy.co.uk.

          Looks like maybe just a quote mismatch, you have double quotes in the front of the address and single quotes after the address.  Hopefully a simple fix.

          This looks like a parsing bug of some kind, notice there is an email address for the ip address.  Can you reproduce this?

          1 Reply Last reply Reply Quote 0
          • ?
            Guest
            last edited by

            Here are the issues I've come across so far with our testing:

            • Spamtrap email addresses don't get saved or applied.  Entering in an address doesn't add it to the database, and eventually the field is listed again as empty.  Re-Adding the entry similarly doesn't work.

            • No RRD Graph reporting.  This was part of the original bounty and I'm quite sure it was in the original spamd package.

            • As previously reported, entries in the "queue" cannot be whitelisted, blacklisted or deleted.  The icons just wiggle instead of doing anything.

            1 Reply Last reply Reply Quote 0
            • F
              flachance
              last edited by

              I concur with those issues.  I am seeing the same on one of my client's firewall.  I just didn't have time to put it down in words.  I personally find the third one most annoying.

              Add to this the parsing error that Knobee & blueivy reported earlier.  I too am seeing that in some entries.

              Francois

              1 Reply Last reply Reply Quote 0
              • ?
                Guest
                last edited by

                I'm still trying to chase down why this happened and what the details are, but as soon as I removed a blacklist from the spamd configuration, my shaper rules blew up:

                Apr 28 16:54:07 spamlogd[81627]: exiting
                Apr 28 16:54:07 spamlogd[81627]: exiting
                Apr 28 16:54:09 spamd[77903]: listening for incoming connections.
                Apr 28 16:54:09 spamd[77903]: listening for incoming connections.
                Apr 28 16:54:12 check_reload_status: reloading filter
                Apr 28 16:54:16 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.de
                Apr 28 16:54:16 php: : There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.debug:54: queue qP2
                Apr 28 16:55:35 spamlogd[77901]: exiting
                Apr 28 16:55:35 spamlogd[77901]: exiting
                Apr 28 16:55:38 spamd[78329]: listening for incoming connections.
                Apr 28 16:55:38 spamd[78329]: listening for incoming connections.
                Apr 28 16:55:41 check_reload_status: reloading filter
                Apr 28 16:55:46 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.de
                Apr 28 16:55:46 php: : There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.debug:54: queue qP2
                Apr 28 16:56:06 check_reload_status: reloading filter
                Apr 28 16:56:16 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.de
                Apr 28 16:56:16 php: : There were error(s) loading the rules: /tmp/rules.debug:41: syntax error /tmp/rules.debug:46: queue qlanRoot has no parent /tmp/rules.debug:46: errors in queue definition /tmp/rules.debug:48: queue qlandef has no parent /tmp/rules.debug:48: errors in queue definition /tmp/rules.debug:50: queue qlanacks has no parent /tmp/rules.debug:50: errors in queue definition /tmp/rules.debug:52: queue qPenaltyDown has no parent /tmp/rules.debug:52: errors in queue definition /tmp/rules.debug:54: queue qP2

                Anyone seen anything like this?

                1 Reply Last reply Reply Quote 0
                • ?
                  Guest
                  last edited by

                  Yep, its definitely related to spamd, I had to kill the install of spamd and now the shaper rules are not broken anymore.

                  1 Reply Last reply Reply Quote 0
                  • S
                    sullrich
                    last edited by

                    I don't see any way that it could be linked to SpamD.  I'll have to speak with eri

                    1 Reply Last reply Reply Quote 0
                    • S
                      sullrich
                      last edited by

                      submicron, please send a broken rules.debug to my email (gmail).  Thanks

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by

                        I'm still trying to reliably re-create it, if I can, I'll send you the rules.

                        1 Reply Last reply Reply Quote 0
                        • S
                          sullrich
                          last edited by

                          Just fixed all the button operations, delete, spamtrap, etc.  Please test!!

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            I just re-installed the package and the jiggly buttons that do nothing still seem to be there.

                            1 Reply Last reply Reply Quote 0
                            • S
                              sullrich
                              last edited by

                              They are still there, but they do work now…  Or at least the delete function button worked for me?

                              1 Reply Last reply Reply Quote 0
                              • ?
                                Guest
                                last edited by

                                Apparently they work, but only if you reload the page manually.  My personal feeling is that pressing the buttons should cause the page to reload itself, otherwise you'll have lots of people frustratedly thinking that the buttons don't work.

                                Also, on that same page, the database totals apparently don't work.  I have several items listed as "Whitelisted" but the totals show 0 items whitelisted.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sullrich
                                  last edited by

                                  @submicron:

                                  Apparently they work, but only if you reload the page manually.  My personal feeling is that pressing the buttons should cause the page to reload itself, otherwise you'll have lots of people frustratedly thinking that the buttons don't work.

                                  Also, on that same page, the database totals apparently don't work.  I have several items listed as "Whitelisted" but the totals show 0 items whitelisted.

                                  There is a little blurb about that on the page at the bottom.  The idea is being able to rapdily delete, deny or whitelist a number of domains without having to wait on page reloads…  So I dunno, I personally like the ajax option but maybe we just need to hide the table row after an operation occurs.

                                  1 Reply Last reply Reply Quote 0
                                  • ?
                                    Guest
                                    last edited by

                                    Yeah probably, since we all know that nobody reads the helpful little blurbs.

                                    1 Reply Last reply Reply Quote 0
                                    • G
                                      glanc
                                      last edited by

                                      Hi! I would like to test spamD, on one of my pfsense installation, but i need some guide on setting it up. I've read the man page on openbsd site just to have a clue, but a quick howto would speed things up.

                                      The idea is to let my pfsense box be a gateway for our internal exchange server, that is being flooded with spam right now  :-.

                                      Thanks.

                                      1 Reply Last reply Reply Quote 0
                                      • ?
                                        Guest
                                        last edited by

                                        The package is really for testing right now, I wouldn't recommend putting it in production unless you 1) know what you're doing or 2) can tolerate potential lost email.

                                        1 Reply Last reply Reply Quote 0
                                        • G
                                          glanc
                                          last edited by

                                          Ok. You would not implement it at this point!  :-[ Anyway i can help to accellerate the testing process? I was testing it with vmware.

                                          1 Reply Last reply Reply Quote 0
                                          • H
                                            hammeraus001
                                            last edited by

                                            Installed at 8:15am Thursday 8/5/2008.

                                            So far, no bugs or issues - working perfectly.  Spam hitting the server has dropped dramatically.

                                            From start of April to time of installation - 10864
                                            Since installation to 10:00am 15/5/2008 - 193

                                            98.15% drop (and growing) in Spam hitting the mail server.

                                            Will be testing pfSense including SpamD under VMWare in the next week.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post