OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
spamd ignoring whites in grey mode

From: -f (fobiit.org)
Date: Tue Nov 30 2004 - 11:57:09 CST


hi there,

i have upgraded my server to 3.6-current and cleaning up the fallout.
everything is nice, except that i don't get mails anymore...

here is my pf.conf:
<-------------------------------
if="rl0"

set block-policy return
set loginterface $if

table <spamd> persist
table <spamd-white> persist

scrub in

# spamd
rdr pass on $if proto tcp from <spamd> to port smtp \
        -> 127.0.0.1 port spamd
rdr pass on $if proto tcp from !<spamd-white> to port smtp \
        -> 127.0.0.1 port spamd

block in
pass quick on lo0

pass in on $if inet proto icmp all icmp-type 8 code 0 keep state
pass in on $if inet proto { tcp udp } to $if port domain keep state
pass in on $if inet proto tcp to $if port { ssh http } keep state

pass in log on $if inet proto tcp to $if port smtp keep state
pass out log on $if inet proto tcp from $if to any port smtp keep state

pass out on $if proto tcp all modulate state flags S/SA
pass out on $if proto { udp icmp } all keep state
<-------------------------------

i haven't changed spamd.conf . i use spamd in grey listing mode.

integer> grep spamd /etc/rc.conf.local
spamd_flags="" # for normal use: "" and see spamd-setup(8)
spamd_grey=YES # use spamd greylisting if YES

when i enable pf and try to send mail from aaa.bbb.ccc.ddd
it does not get delivered, but it is in the spamd-white list.

integer> sudo pfctl -t spamd-white -T show | grep aaa.bbb.ccc.ddd
   aaa.bbb.ccc.ddd

also if i do:

aaa.bbb.ccc.ddd> telnet mymachine smtp
220 integer.obiit.org ESMTP spamd IP-based SPAM blocker; Tue Nov 30 18:40:30 2004

spamlogd is running.
if i disable pf, mail flows ok.
what am i doing wrong?
--
illiterate? write for a free brochure!