MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: lenawaii on 2016-06-29, 16:37:31

Title: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-06-29, 16:37:31
Hi Mustapha,

I've some trouble with Spamdyke since I've installed Let's Encrypt on my VPS and and SSL certificate to secure Qmail Toaster.

Let's Encrypt works perfectly, so no worry for this. Here's what I've done:

1/ Remplacement of /var/qmail/control/servercert.pem file with my ssl cert + intermediate cert + privatekey
Works fine with 465 port and 993 port

2/ Modification of /var/qmail/supervise/smtp-ssl/run file with:

export SMTPAUTH="!" \
   SMTPS=1 \
   SSL=1 \
   REQUIRE_AUTH=0 \
   FORCE_TLS=0 \
   DENY_TLS=0 \
   AUTH=1 \
   REQUIRE_AUTH=0 \
   ALLOW_INSECURE_AUTH=0

3/ Modification of /etc/spamdyke.conf file and added
tls-level=smtps
just before
tls-certificate-file=/var/qmail/control/servercert.pem

4/ Restart of Qmail

RESULT :
I can send emails but emails sent from outside the server are not delivered to my VPS, they are blocked. If I desactivate Spamdyke, i will receive emails so the problem is from Spamdyke.

Plus, tls-level=smtps line in spamdyke.conf file disappear when I desactivate Spamdyke. I'm sure I do something wrong.

Can you please give me some help, thanks

Lenawaii



Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-06-30, 14:38:32
Copy /usr/local/lxlabs/kloxo/file/template/spamdyke.conf to custom.spamdyke.conf. And then modified this custom.spamdyke.conf.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-07-02, 00:42:15
Thank you Mustapha but It didn't work.

Here is some info :
- I have Kloxo MR 6.5.0 and spamdyke version 5.0.0.
- custom.spamdyke.conf didn't work, I had to modify /usr/local/lxlabs/kloxo/file/template/spamdyke.conf directly so that I could see the line tls-level=smtps
- I could see an error in mailog file
smtp-ssl: ERROR(process_config_file()@configuration.c:4389): Unknown configuration file option in file /etc/spamdyke.conf on line 65: reject-missing-sender-mx
- so I unchecked this option, after that no error but mail is still blocked for delivery.
- I even unchecked graylisting and no resolution
- when I unckeck spamdyke and restart gmail, all emails blocked are finally delivered to my server.

So something goes wrong and I don't know where to search to resolve this, please help me.

Thank you
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-07-02, 04:15:14
Yes, custom spamdyke.conf not work in 6.5.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-07-04, 18:19:32
Hi Mustapha,
After tries et errors, I had to remove qmail toaster and I tried to reinstall it but there is an error I can't solve:

I did:
yum remove *-toaster
rm -rf /var/qmail/
yum install *-toaster webalizer cronie cronie-anacron crontabs

But I have this issue:
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.021-141.el6_7.1 will be installed
---> Package perl-IO-Compress-Base.x86_64 0:2.021-141.el6_7.1 will be installed
---> Package perl-IO-Compress-Zlib.x86_64 0:2.021-141.el6_7.1 will be installed
---> Package spamassassin-toaster.x86_64 0:3.4.1-1.4.7.mr.el6 will be installed
--> Processing Dependency: perl(Geo::IP) for package: spamassassin-toaster-3.4.1-1.4.7.mr.el6.x86_64
--> Processing Conflict: mysql56u-libs-5.6.31-1.ius.el6.x86_64 conflicts mysql-libs < 5.6
--> Finished Dependency Resolution
Error: Package: spamassassin-toaster-3.4.1-1.4.7.mr.el6.x86_64 (mratwork-release-version-arch)
           Requires: perl(Geo::IP)
Error: mysql56u-libs conflicts with mysql55-libs-5.5.50-1.ius.el6.x86_64
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

Do you know how to fix this ? thanks a lot
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-07-10, 02:15:39
Hi everbody,

With no help, I had to reinstall Kloxo MR 6.5 on my VPS  :(

Since I try to make Spamdyke work with TSL option, Spamdyke does not work at all even without TLS.

Can someone help me resolve this issue? Since spamdyke is desactivated on my VPS, I receive spam and I hate spam.

Thanks for any help.
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-07-10, 16:28:33
Kloxo-MR 6.5 no possible to customize spamdyke.conf. It's different compare to 7.0.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-08-01, 01:29:32
Hi Mustapha,

I tried to upgrade to Kloxo MR7 from Kloxo MR 6.5 and got trouble, any idea?

login as: root
root@xx.xxx.xx.xxx's password:
[root@server3 ~]# yum replace kloxomr --replace-with=kloxomr7 -y
Loaded plugins: fastestmirror, priorities, protectbase, replace
Replacing packages takes time, please be patient...
Loading mirror speeds from cached hostfile
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirrors.ircam.fr
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Error: No Package Matching kloxomr7
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-08-01, 03:40:54
Inform here 'dir -l /etc/yum.repos.d; yum list mratwork --showduplicates; yum list kloxomr7*'.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-08-01, 17:15:03
Thanks for your help :-) here is the info:

[root@server3 ~]# dir -l /etc/yum.repos.d
total 52
-rw-r--r-- 1 root root 1991 May 18 21:47 CentOS-Base.repo
-rw-r--r-- 1 root root  647 May 18 21:47 CentOS-Debuginfo.repo
-rw-r--r-- 1 root root  630 May 18 21:47 CentOS-Media.repo
-rw-r--r-- 1 root root 6259 May 18 21:47 CentOS-Vault.repo
-rw-r--r-- 1 root root  289 May 18 21:47 CentOS-fasttrack.repo
-rw-r--r-- 1 root root 9244 Jul 19 01:25 mratwork.repo
-rw-r--r-- 1 root root 8435 Jul  4 23:12 mratwork.repo.rpmsave
-rw-r--r-- 1 root root  219 Apr 15  2014 vz.repo


[root@server3 ~]# yum list mratwork --showduplicates
Loaded plugins: fastestmirror, priorities, protectbase, replace
Loading mirror speeds from cached hostfile
mratwork-epel/metalink                                   |  25 kB     00:00
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.speedpartner.de
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
base                                                     | 3.7 kB     00:00
extras                                                   | 3.4 kB     00:00
mratwork-google-mod-pagespeed                            |  951 B     00:00
mratwork-ius-archive                                     | 2.3 kB     00:00
mratwork-ius-archive/primary_db                          | 3.8 MB     00:01
mratwork-ius-stable                                      | 2.2 kB     00:00
mratwork-ius-stable/primary_db                           | 209 kB     00:00
mratwork-mariadb                                         | 2.9 kB     00:00
mratwork-nginx                                           | 2.9 kB     00:00
mratwork-nginx-stable                                    | 2.9 kB     00:00
mratwork-release-neutral-noarch                          | 1.3 kB     00:00
mratwork-release-neutral-noarch/primary                  |  93 kB     00:00
mratwork-release-neutral-noarch                                         340/340
mratwork-release-version-arch                            | 1.2 kB     00:00
mratwork-release-version-arch/primary                    | 102 kB     00:00
mratwork-release-version-arch                                           277/277
mratwork-varnish-3.0                                     |  951 B     00:00
mratwork-webtatic                                        | 3.6 kB     00:00
updates                                                  | 3.4 kB     00:00
vz-base                                                  |  951 B     00:00
vz-updates                                               |  951 B     00:00
0 packages excluded due to repository protections
Error: No matching Packages to list


[root@server3 ~]# yum list kloxomr7*
Loaded plugins: fastestmirror, priorities, protectbase, replace
Loading mirror speeds from cached hostfile
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.speedpartner.de
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Available Packages
kloxomr7.noarch            7.0.0.b-2016080101.mr mratwork-release-neutral-noarch
kloxomr7-thirdparty-phpmyadmin.noarch
                           4.4.15.1-1.mr         mratwork-release-neutral-noarch
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-08-01, 18:04:36
Any idea to get spamdyke work like before in Kloxo MR 6.5, since I activated TLS, i can not run spamdyke. I put back all the files to the original but it's not working like before.

I also did:
# yum update
# sh /script/cleanup
to reset config files but didn't work

I also did:
# sh /script/fixmail-all
# sh /script/restart-mail
but didn't work.

Without Spamdyke, I receive spam in my VPS. Please help. Then I will upgrade all my VPS to Kloxo MR7 but I don't want to do a wrong command and loose data. Thank you
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-08-02, 02:55:47
Use custom.spamdyke.conf only work under Kloxo-MR 7.0.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-08-02, 07:57:14
I would do upgrade to kloxo mr 7 but i have a bug, you can read the info above to help me fix the issue, thanks
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-08-02, 08:20:26
After 'yum replace kloxomr --replace-with=kloxomr7', you need running 'sh /script/upcp -y' (read https://github.com/mustafaramadhan/kloxo/blob/dev/how-to-install.txt).
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-09-16, 16:24:05
Hey Mustapha,

I have now Kloxo MR 7.0 and Spamdyke does not work with TLS, please Help :-)

I did the following :

1/ Install of  /var/qmail/control/servercert.pem file Ok

2/ Modification of /var/qmail/supervise/smtp-ssl/run file with:

export SMTPAUTH="!" \
   SMTPS=1 \
   SSL=1 \
   REQUIRE_AUTH=0 \
   FORCE_TLS=0 \
   DENY_TLS=0 \
   AUTH=1 \
   REQUIRE_AUTH=0 \
   ALLOW_INSECURE_AUTH=0

3/ Modification of /etc/spamdyke.conf file and added
tls-level=smtps
just before
tls-certificate-file=/var/qmail/control/servercert.pem

and also created /usr/local/lxlabs/kloxo/file/template/custom.spamdyke.conf

4/ Restart of Qmail

So what's wrong with spamdyke? Thanks
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-09-16, 16:38:38
What's you know where spamdyke not work with tls?.
Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-09-16, 16:42:50
Read spamdyke.conf.original to know what's mean 'tls-level'.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-09-16, 16:55:09
I just read spamdyke.conf.original, by default there is no value for tls-level, what do you suggest?

Do i need to modify /var/qmail/supervise/smtp-ssl/run file or something else?

thanks for your help, this is quite important to me :-)

Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-09-16, 17:01:31
I think '...supports TLS or SMTPS...' is 'the key'.
Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-09-16, 18:58:13
I've been searching the solution in Google for days and I do not have the key... sorry

I even put the values to original ones in /var/qmail/supervise/smtp-ssl/run and /etc/spamdyke.conf and /var/qmail/control/servercert.pem

but spamdyke does not work anymore like before. I also did: sh /script/cleanup

But when spamdyke is activated I cannot receive emails on the server. When Spamdyke is not activated, i receive the emails, so something wrong with spamdyke since I tried to use TLS, i had exactly the same issue with Kloxo 6.5 weeks ago.

Can you please help me use spamdyke without reinstalling Kloxo MR 7.0? Thanks


Title: Re: Spamdyke not working with SSL certificate
Post by: lenawaii on 2016-09-17, 00:46:21
I found the solution :-)

# yum remove spamdyke
# yum install spamdyke

After install, I had to:
- define graylist-level=always-create-dir in /etc/spamdyke.conf
- there is no need to define tls-level
- just need to place a valid server certificate in /var/qmail/control/servercert.pem
- and modify /var/qmail/supervise/smtp-ssl/run as shown above

BUT I just noticed a strange behavior in /var/qmail/spamdyke/blacklist_ip, an ip list is generated automatically that makes spamdyke fail.

Even I delete the list, the list reappears inside after some little time. To make Spamdyke work proprely, I had to erase ip-blacklist-file=/var/qmail/spamdyke/blacklist_ip in /etc/spamdyke.conf otherwise, emails are blocked

Really strange, what do you think of this Mustapha? Here is below the IPs list generated automatically:
109.120.149.102
125.227.232.151
157.122.148.200
177.67.106.25
183.237.121.252
183.240.203.51
185.125.4.135
185.130.6.34
185.40.4.126
185.81.154.19
189.43.112.165
190.8.148.61
195.22.126.189
202.65.138.2
209.105.164.250
23.253.175.74
23.96.181.151
24.244.159.12
45.62.245.139
46.105.49.146
5.135.86.196
80.82.64.102
83.144.119.206
89.248.160.150
89.248.169.36
93.174.93.46
98.174.187.19
::1
185.56.80.141
27.38.41.182
I don't know where these IPs are from... Thanks for helping

Title: Re: Spamdyke not working with SSL certificate
Post by: MRatWork on 2016-09-17, 05:17:26
IP listing taken from 'DNS RBL Servers'.  Maybe you need add 'Whitelist IPs' for '::1'.