OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Greylisting Query

From: Cami Sardinha (camismweb.co.za)
Date: Mon Jan 28 2008 - 01:14:16 CST


Lydiard wrote:
> ----- Message from camis
>
>> README.txt
>> ..
>> # failures
>> module=bypass <- mysql failed inside module (module can be
>> whitelist,blacklist,helo,etc..)
>> ..
>>
>> Is your MySQL database(+queries) operational?
>> Please 'DEBUG=3' in your policyd.conf to see
>> what is failing and why. (Alternatively look
>> through your MySQL logs).
>
> HI Cami
>
> I discounted that as a cause, because I have lines like this:
>
> Jan 27 21:30:21 donald postfix/smtpd[22081]: connect from
> unknown[212.15.148.31]
> Jan 27 21:30:23 donald postfix-policyd: rcpt=5388, greylist=new,
> host=212.15.148.31 (unknown), from=commonly45highnetworthclient.com,
> to=662991491252.626104566073cynage.com, size=0
> Jan 27 21:30:23 donald postfix/smtpd[22081]: NOQUEUE: reject: RCPT from
> unknown[212.15.148.31]: 550 5.1.1
> <662991491252.626104566073cynage.com>: Recipient address rejected: User
> unknown in virtual
> mailbox table; from=<commonly45highnetworthclient.com>
> to=<662991491252.626104566073cynage.com> proto=ESMTP
> helo=<[212.15.148.31]>
> Jan 27 21:30:24 donald postfix/smtpd[22081]: disconnect from
> unknown[212.15.148.31]
>
> which indicate to me that it's working (just not where I want it to)..
>
> Turning on debugging shows that all is well (doesn't it?)..
>
> Jan 27 21:43:20 donald postfix/smtpd[22081]: connect from
> ADijon-258-1-20-42.w90-6.abo.wanadoo.fr[90.6.3.42]
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 select(): fd 9 is
> ready for read
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd 9: w_read: returning
> -2 after reading 550 bytes
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][0]:request=smtpd_access_policy
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][1]:protocol_state=rcpt
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][2]:protocol_name=smtp
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][3]:client_address=90.6.3.42
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][4]:client_name=adijon-258-1-20-42.w90-6.abo.wanadoo.fr
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][5]:reverse_client_name=adijon-258-1-20-42.w90-6.abo.wanadoo.fr
>
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][6]:helo_name=adijon-258-1-20-42.w90-6.abo.wanadoo.fr
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][7]:sender=ricojzydmtopsurftips.de
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][8]:recipient=idolatryybtscynage.com
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][9]:recipient_count=0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][10]:queue_id=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][11]:instance=5641.479cfaf8.6002d.0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][12]:size=0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][13]:etrn_domain=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][14]:sasl_method=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][15]:sasl_username=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][16]:sasl_sender=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][17]:ccert_subject=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][18]:ccert_issuer=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][19]:ccert_fingerprint=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][20]:encryption_protocol=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][21]:encryption_cipher=
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][22]:encryption_keysize=0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> policy_array[9][23]: _keysize=0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][0]:
> adijon-258-1-20-42.w90-6.abo.wanadoo.fr
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][2]:
> 90.6.3.42
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][3]:
> 90.6.3.%
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][4]:
> 90.6.%.%
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][5]:
> 90.%.%.%
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][6]:
> ricojzydm
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][7]:
> topsurftips.de
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][8]:
> idolatryybts
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 host_array[9][9]:
> cynage.com
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> triplet_array[9][0]: 90.6.3
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> triplet_array[9][1]: ricojzydmtopsurftips.de
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> triplet_array[9][2]: idolatryybtscynage.com
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 triplet_array[9][3]: 0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> triplet_array[9][5]: adijon-258-1-20-42.w90-6.abo.wanadoo.fr
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9
> triplet_array[9][6]: 5641.479cfaf8.6002d.0
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking whitelist
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(*) FROM whitelist WHERE _whitelist='90.6.3.42' OR
> _whitelist='90.6.3.%' OR _whitelist='90.6.%.%' OR _whitelist='90.%
> .%.%'
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (recieved)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (extracted)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 whitelist not
> found: 90.6.3.42
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking whitelist
> dnsname
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(*) FROM whitelist_dnsname WHERE
> 'adijon-258-1-20-42.w90-6.abo.wanadoo.fr' LIKE _whitelist
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (recieved)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (extracted)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 whitelist_sender
> not found: 90.6.3.42
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking blacklist
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(*) FROM blacklist WHERE _blacklist='90.6.3.42' OR
> _blacklist='90.6.3.%' OR _blacklist='90.6.%.%' OR _blacklist='90.%
> .%.%'
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (recieved)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (extracted)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 blacklist not
> found: 90.6.3.42
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking blacklist
> helo
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(_helo) FROM blacklist_helo WHERE
> _helo='adijon-258-1-20-42.w90-6.abo.wanadoo.fr'
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (recieved)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (extracted)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 blacklist helo not
> found: adijon-258-1-20-42.w90-6.abo.wanadoo.fr
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking blacklist
> sender/domain
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(*) FROM blacklist_sender WHERE _blacklist='topsurftips.de'
> OR _blacklist='ricojzydmtopsurftips.de'
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (recieved)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 row: 0 data: 0
> (extracted)
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 blacklist_sender
> not found: topsurftips.de ricojzydmtopsurftips.de
> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9 checking blacklist
> dnsname

...........

> Jan 27 21:43:20 donald postfix-policyd: DEBUG: fd: 9, db_optquery():
> SELECT COUNT(*) FROM blacklist_dnsname WHERE
> 'adijon-258-1-20-42.w90-6.abo.wanadoo.fr' LIKE _blacklist
> Jan 27 21:43:20 donald postfix-policyd: db_optquery()/mysql_query():
> Table 'postfixpolicyd.blacklist_dnsname' doesn't exist -> SELECT
> COUNT(*) FROM blacklist_dnsname WHERE 'adijon-258-1-20-42.w90-6.
> abo.wanadoo.fr' LIKE _blacklist

Fix your database. If you're upgrading between versions, be sure
to follow the CHANGELOG which explains what is needed when doing
upgrades.

Cami