[root@doctor.nl2k.ab.ca: New 550s getting automagically placedinto access file]

[Mike Kercher]

Scott Silva <> wrote on Tuesday, May 08, 2007 3:11 PM:

: Dave Shariff Yadallee - System Administrator a.k.a. The Root of the
: Problem spake the following on 5/8/2007 11:36 AM: 
:: On Tue, May 08, 2007 at 11:06:46AM -0500, Mike Kercher wrote:
::: Dave Shariff Yadallee - System Administrator a.k.a. The Root of
::: theProblem <> wrote on Tuesday, May 08, 2007 10:48 AM:
::: 
:::: On Tue, May 08, 2007 at 04:27:29PM +0100, Martin.Hepworth wrote:
::::: Dave
::::: 
::::: There's a CustomFunction called IPBlock that will update this list
::::: based on number of messages received from an ip-address.....
::::: 
::::: Normally it's attached to "Always Looked Up Last" in the following
::::: manner inside MailScanner.conf..
::::: 
::::: Always Looked Up Last = &IPBlock
::::: 
:::: 
::: 
:::: 
:::: 
:::: 
:::: As I said this is set to no;
:::: however, when I did a tail on /etc/mail/acess I got:
:::: 
:::: 
:::: 66.220.2.220    550 Persistent Virus Source
:::: 212.122.114.249 550 Persistent Virus Source
:::: 85.68.131.183   550 Persistent Virus Source
:::: 69.11.213.106   550 Persistent Virus Source
:::: 66.201.40.102   550 Persistent Virus Source
:::: 85.2.209.213    550 Persistent Virus Source
:::: 83.112.32.94    550 Persistent Virus Source
:::: 200.62.150.49   550 We do not accept junk mail
:::: 89.24.82.141    550 We do not accept junk mail
:::: 
:::: 
:::: All that has changed recently is
:::: 
:::: clamd from 0.88.7 to 0.90.2
:::: spamd from 3.1.X to 3.2.0
:::: 
:::: and
:::: 
:::: MailScanner 4.58.9 to 4.59.4-2 just this weekend.
:::: 
:::: 
:::: I would like to turn off the 550 We do not accept junk mail
:::: feature as I would term it to be buggy, however the
:::: Presistent Virus Source can stay for now; get rid of the
:::: fraud/Virus mail thank you. 
:::: 
::::: 
::::: --
::::: Martin Hepworth
::::: Snr Systems Administrator
::::: Solid State Logic
::::: Tel: +44 (0)1865 842300
::::: 
:::::: -----Original Message-----
:::::: From: mailscanner-bounces at lists.mailscanner.info
:::::: [mailto:mailscanner- bounces at lists.mailscanner.info] On Behalf Of
:::::: Dave Shariff Yadallee - System Administrator a.k.a. The Root of
:::::: the Problem Sent: 08 May 2007 16:00
:::::: To: mailscanner at lists.mailscanner.info
:::::: Subject: [root at doctor.nl2k.ab.ca: New 550s getting automagically
:::::: placed into access file] 
:::::: 
:::::: I have to resend this as I found in my logs the mailscanner.info
:::::: mailserver got listed as below.
:::::: 
:::::: ----- Forwarded message from "Dave Shariff Yadallee -  System
:::::: Administrator a.k.a. The Root of the Problem"
:::::: <root at doctor.nl2k.ab.ca> --- --
:::::: 
:::::: Date: Tue, 8 May 2007 07:44:36 -0600
:::::: From: "Dave Shariff Yadallee -  System Administrator a.k.a. The
:::::: Root of the Problem" <root at doctor.nl2k.ab.ca>
:::::: To: mailscanner at lists.mailscanner.info
:::::: Subject: New 550s getting automagically placed into access file
:::::: User-Agent: Mutt/1.5.12-2006-07-14
:::::: 
:::::: I know there are 3 new packages out for MailScanner, spamd and
:::::: clamd however I cannot determine with is adding to the
:::::: /etc/mail/access file 550 We do not accept junk mail .
:::::: 
:::::: I need to turn of this feature as it block transmission from
:::::: secondary to primary. 
:::::: 
:::::: Also I am running Botnet 0.7 .
:::::: 
:::::: ----- End forwarded message -----
::: 
::: Are you running Vispan?
::: 
:: 
:: Yes Vispan 3.0
:: 
: That is what is adding those entries.
: 
: --
: 

That is correct.  There is a setting in the .conf file to use or not to
use the access file.


-Mike