Spamdyke not working with SSL certificate

[lenawaii]

Hi Mustapha,

I've some trouble with Spamdyke since I've installed Let's Encrypt on my VPS and and SSL certificate to secure Qmail Toaster.

Let's Encrypt works perfectly, so no worry for this. Here's what I've done:

1/ Remplacement of /var/qmail/control/servercert.pem file with my ssl cert + intermediate cert + privatekey
Works fine with 465 port and 993 port

2/ Modification of /var/qmail/supervise/smtp-ssl/run file with:

export SMTPAUTH="!" \
   SMTPS=1 \
   SSL=1 \
   REQUIRE_AUTH=0 \
   FORCE_TLS=0 \
   DENY_TLS=0 \
   AUTH=1 \
   REQUIRE_AUTH=0 \
   ALLOW_INSECURE_AUTH=0

3/ Modification of /etc/spamdyke.conf file and added
tls-level=smtps
just before
tls-certificate-file=/var/qmail/control/servercert.pem

4/ Restart of Qmail

RESULT :
I can send emails but emails sent from outside the server are not delivered to my VPS, they are blocked. If I desactivate Spamdyke, i will receive emails so the problem is from Spamdyke.

Plus, tls-level=smtps line in spamdyke.conf file disappear when I desactivate Spamdyke. I'm sure I do something wrong.

Can you please give me some help, thanks

Lenawaii

[MRatWork]

Copy /usr/local/lxlabs/kloxo/file/template/spamdyke.conf to custom.spamdyke.conf. And then modified this custom.spamdyke.conf.

[lenawaii]

Thank you Mustapha but It didn't work.

Here is some info :
- I have Kloxo MR 6.5.0 and spamdyke version 5.0.0.
- custom.spamdyke.conf didn't work, I had to modify /usr/local/lxlabs/kloxo/file/template/spamdyke.conf directly so that I could see the line tls-level=smtps
- I could see an error in mailog file
smtp-ssl: ERROR(process_config_file()@configuration.c:4389): Unknown configuration file option in file /etc/spamdyke.conf on line 65: reject-missing-sender-mx
- so I unchecked this option, after that no error but mail is still blocked for delivery.
- I even unchecked graylisting and no resolution
- when I unckeck spamdyke and restart gmail, all emails blocked are finally delivered to my server.

So something goes wrong and I don't know where to search to resolve this, please help me.

Thank you

[MRatWork]

Yes, custom spamdyke.conf not work in 6.5.

[lenawaii]

Hi Mustapha,
After tries et errors, I had to remove qmail toaster and I tried to reinstall it but there is an error I can't solve:

I did:
yum remove *-toaster
rm -rf /var/qmail/
yum install *-toaster webalizer cronie cronie-anacron crontabs

But I have this issue:
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.021-141.el6_7.1 will be installed
---> Package perl-IO-Compress-Base.x86_64 0:2.021-141.el6_7.1 will be installed
---> Package perl-IO-Compress-Zlib.x86_64 0:2.021-141.el6_7.1 will be installed
---> Package spamassassin-toaster.x86_64 0:3.4.1-1.4.7.mr.el6 will be installed
--> Processing Dependency: perl(Geo::IP) for package: spamassassin-toaster-3.4.1-1.4.7.mr.el6.x86_64
--> Processing Conflict: mysql56u-libs-5.6.31-1.ius.el6.x86_64 conflicts mysql-libs < 5.6
--> Finished Dependency Resolution
Error: Package: spamassassin-toaster-3.4.1-1.4.7.mr.el6.x86_64 (mratwork-release-version-arch)
           Requires: perl(Geo::IP)
Error: mysql56u-libs conflicts with mysql55-libs-5.5.50-1.ius.el6.x86_64
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest

Do you know how to fix this ? thanks a lot

[lenawaii]

Hi everbody,

With no help, I had to reinstall Kloxo MR 6.5 on my VPS 

Since I try to make Spamdyke work with TSL option, Spamdyke does not work at all even without TLS.

Can someone help me resolve this issue? Since spamdyke is desactivated on my VPS, I receive spam and I hate spam.

Thanks for any help.

[MRatWork]

Kloxo-MR 6.5 no possible to customize spamdyke.conf. It's different compare to 7.0.

[lenawaii]

Hi Mustapha,

I tried to upgrade to Kloxo MR7 from Kloxo MR 6.5 and got trouble, any idea?

login as: root
root@xx.xxx.xx.xxx's password:
[root@server3 ~]# yum replace kloxomr --replace-with=kloxomr7 -y
Loaded plugins: fastestmirror, priorities, protectbase, replace
Replacing packages takes time, please be patient...
Loading mirror speeds from cached hostfile
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirrors.ircam.fr
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Error: No Package Matching kloxomr7

[MRatWork]

Inform here 'dir -l /etc/yum.repos.d; yum list mratwork --showduplicates; yum list kloxomr7*'.

[lenawaii]

Thanks for your help :-) here is the info:

[root@server3 ~]# dir -l /etc/yum.repos.d
total 52
-rw-r--r-- 1 root root 1991 May 18 21:47 CentOS-Base.repo
-rw-r--r-- 1 root root  647 May 18 21:47 CentOS-Debuginfo.repo
-rw-r--r-- 1 root root  630 May 18 21:47 CentOS-Media.repo
-rw-r--r-- 1 root root 6259 May 18 21:47 CentOS-Vault.repo
-rw-r--r-- 1 root root  289 May 18 21:47 CentOS-fasttrack.repo
-rw-r--r-- 1 root root 9244 Jul 19 01:25 mratwork.repo
-rw-r--r-- 1 root root 8435 Jul  4 23:12 mratwork.repo.rpmsave
-rw-r--r-- 1 root root  219 Apr 15  2014 vz.repo


[root@server3 ~]# yum list mratwork --showduplicates
Loaded plugins: fastestmirror, priorities, protectbase, replace
Loading mirror speeds from cached hostfile
mratwork-epel/metalink                                   |  25 kB     00:00
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.speedpartner.de
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
base                                                     | 3.7 kB     00:00
extras                                                   | 3.4 kB     00:00
mratwork-google-mod-pagespeed                            |  951 B     00:00
mratwork-ius-archive                                     | 2.3 kB     00:00
mratwork-ius-archive/primary_db                          | 3.8 MB     00:01
mratwork-ius-stable                                      | 2.2 kB     00:00
mratwork-ius-stable/primary_db                           | 209 kB     00:00
mratwork-mariadb                                         | 2.9 kB     00:00
mratwork-nginx                                           | 2.9 kB     00:00
mratwork-nginx-stable                                    | 2.9 kB     00:00
mratwork-release-neutral-noarch                          | 1.3 kB     00:00
mratwork-release-neutral-noarch/primary                  |  93 kB     00:00
mratwork-release-neutral-noarch                                         340/340
mratwork-release-version-arch                            | 1.2 kB     00:00
mratwork-release-version-arch/primary                    | 102 kB     00:00
mratwork-release-version-arch                                           277/277
mratwork-varnish-3.0                                     |  951 B     00:00
mratwork-webtatic                                        | 3.6 kB     00:00
updates                                                  | 3.4 kB     00:00
vz-base                                                  |  951 B     00:00
vz-updates                                               |  951 B     00:00
0 packages excluded due to repository protections
Error: No matching Packages to list


[root@server3 ~]# yum list kloxomr7*
Loaded plugins: fastestmirror, priorities, protectbase, replace
Loading mirror speeds from cached hostfile
 * base: distrib-coffee.ipsl.jussieu.fr
 * extras: centos.quelquesmots.fr
 * mratwork-epel: mirror.speedpartner.de
 * mratwork-ius-stable: mirrors.ircam.fr
 * mratwork-release-neutral-noarch: rpms.mratwork.com
 * mratwork-release-version-arch: rpms.mratwork.com
 * mratwork-webtatic: uk.repo.webtatic.com
 * updates: mirrors.ircam.fr
0 packages excluded due to repository protections
Available Packages
kloxomr7.noarch            7.0.0.b-2016080101.mr mratwork-release-neutral-noarch
kloxomr7-thirdparty-phpmyadmin.noarch
                           4.4.15.1-1.mr         mratwork-release-neutral-noarch

[lenawaii]

Any idea to get spamdyke work like before in Kloxo MR 6.5, since I activated TLS, i can not run spamdyke. I put back all the files to the original but it's not working like before.

I also did:
# yum update
# sh /script/cleanup
to reset config files but didn't work

I also did:
# sh /script/fixmail-all
# sh /script/restart-mail
but didn't work.

Without Spamdyke, I receive spam in my VPS. Please help. Then I will upgrade all my VPS to Kloxo MR7 but I don't want to do a wrong command and loose data. Thank you

[MRatWork]

Use custom.spamdyke.conf only work under Kloxo-MR 7.0.

[lenawaii]

I would do upgrade to kloxo mr 7 but i have a bug, you can read the info above to help me fix the issue, thanks

[MRatWork]

After 'yum replace kloxomr --replace-with=kloxomr7', you need running 'sh /script/upcp -y' (read https://github.com/mustafaramadhan/kloxo/blob/dev/how-to-install.txt).

[lenawaii]

Hey Mustapha,

I have now Kloxo MR 7.0 and Spamdyke does not work with TLS, please Help :-)

I did the following :

1/ Install of  /var/qmail/control/servercert.pem file Ok

2/ Modification of /var/qmail/supervise/smtp-ssl/run file with:

export SMTPAUTH="!" \
   SMTPS=1 \
   SSL=1 \
   REQUIRE_AUTH=0 \
   FORCE_TLS=0 \
   DENY_TLS=0 \
   AUTH=1 \
   REQUIRE_AUTH=0 \
   ALLOW_INSECURE_AUTH=0

3/ Modification of /etc/spamdyke.conf file and added
tls-level=smtps
just before
tls-certificate-file=/var/qmail/control/servercert.pem

and also created /usr/local/lxlabs/kloxo/file/template/custom.spamdyke.conf

4/ Restart of Qmail

So what's wrong with spamdyke? Thanks