Qpsmtpd

qpsmtpd

qpsmtpd has been a core component of SME Server since SME 7, providing advanced spam fighting capabilities.

SME Server 9.2 introduces qpsmtpd 0.96 with several new capabilities. At the same time, smeserver-qpsmtpd has been updated to provide additional SME Server configuration options.

Upgrade Considerations

A-Record DNSBL Services

Some DNSBL services - notably b.barracudacentral.org - provide their results using a DNS "A" record instead of a DNS TXT record. The dnsbl plugin requires these services to include a colon (":") in dnsbl_zones - however, SME used to use a colon the server separator in the configuration database. In order to support these A-Record DNSBL services, the separator for RBLList, SBLList, and the new UBLList is now a comma.

You can now configure b.barracudacentral.org using (note the single quotes):

config setprop qpsmtpd RBLList server1,server2,'b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>'

DKIM & DMARC

DKIM & DMARC are now supported natively by SME Server. To enable these you will need to configure appropriate DNS records in your public DNS server.

There are forum reports of problems for users who had DKIM enabled using the DKIM contrib.

URIBL

SME Server now supports URIBL - the ability to block emails that contain known malicious URLs within the body of the email. This service is disabled by default.

"Naughty" plugin

SME Server is now using the 'naughty' plugin which allows early plugins like dnsbl, earlytalker, etc to indicate that the email should be rejected at a later point in the interaction. This allows the server to log extra information for denied emails. Specifically, emails denied by dnsbl will now show the sender and recipient email addresses in the qpsmtpd log

Plugins

Below is a list of all the plugins from /usr/share/qpsmtpd/plugins on a freshly updated SME 9.2 server.

+ New in SME 9.2
* Improved or changed in SME 9.2
U Unused (by default) in SME Server
E Extra / External Configuration Required
CW Contrib or Wiki page exists that uses this plugin
SM Can be configured using server-manager
DB Can be configured using db variables
AC Auto-configured by SME Server

• auth (AC)
• autowhitelist_relayrcpt (U)
• badmailfrom
• badmailfromto (U)
• badrcptto (AC)
• bcc (U DB)
• bogus_bounce (+ DB)
• check_goodrcptto (AC)
• check_smtp_forward (AC)
• connection_time (U CW)
• content_log (U)
• count_unrecognized_commands (DB)
• denysoft_multi_rcpt (U)
• disclaimer (U DB CW)
• dkim (+ DB E)
• dkim_sign (+ DB E)
• dmarc (+ DB E)
• dnsbl (* DB CW)
• dns_whitelist_soft (U)
• domainkeys
• dont_require_anglebrackets (U)
• dspam (U)
• earlytalker (AC CW)
• exe_filter (U AC)
• fcrdns (U)
• fix_headers_case (U CW)
• greylisting (U CW)
• handler (U)
• headers (*)
• helo (AC)
• help (U)
• hosts_allow (AC)
• http_config (U)
• ident (U)
• karma (+ U DB)
• karma_tool
• loadcheck (+)
• logging (AC)
• loop (U)
• milter (U)
• naughty (+)
• noop_counter (U)
• parse_addr_withhelo (U)
• peers (AC)
• per_user_config (U CW)
• qmail_deliverable (U)
• queue (AC)
• quit_fortune (U)
• random_error (U)
• rcpt_map (U)
• rcpt_ok (AC)
• rcpt_regexp (U)
• registry.txt (U)
• relay (AC)
• resolvable_fromhost (AC)
• rhsbl (* DB CW)
• sender_permitted_from (+?)
• spamassassin (DB SM AC CW)
• stunnel (U)
• tls (AC)
• tls_cert
• tnef2mime (AC)
• uribl (+ DB)
• user_config (U)
• virus (DB SM CW)
• whitelist (U?)

---