Email Whitelist-Blacklist Control

Languages:

English  • français

Maintainer

Originally developed by Darrell May.

stephdl Stéphane de Labrusse AKA Stephdl

Version

Contrib 10:

0.5.0-9

Contrib 9:

0.3.0-19

smeserver-wbl

The latest version of smeserver-wbl is available in the SME repository, click on the version number(s) for more information.

Description

This contrib provides a server-manager panel to designate user defined email whitelists and blacklists.

An email whitelist is a list of hosts, domains, or email addresses which will be accepted by SME Server regardless of possible spam content or origin. Administrators should use caution when using whitelists as email coming from whitelisted addresses will bypass many of the mechanisms that SME provides for identifying unsafe email messages.

An email blacklist is a list of hosts, domains, or email addresses that will be blocked all of the time.

Installation

Install of the lastest Email Whitelist-Blacklist package is from the smecontribs repo:

Install package:

For SME 10For SME 9For SME 8

yum install --enablerepo=smecontribs smeserver-wbl

yum install --enablerepo=smecontribs smeserver-wbl

Reconfigure machine:

signal-event console-save

or if you prefer to reboot your server

signal-event post-upgrade; signal-event reboot

yum --enablerepo smecontribs install smeserver-wbl

Reconfigure machine:

signal-event console-save

or if you prefer to reboot your server

signal-event post-upgrade; signal-event reboot

Configure:

Once you do this a new menu item will be visable in the Server-Manager on the left hand side, called E-mail WBL traffic is scanned and may be blocked due to the various screening methods enabled. Clicking on this will present you with 3 buttons.

You may use this panel to define e-mail white/black lists and RBLs.

RBL's List is used to adjust DNSBL and RHSBL.
[RBLs List]

Black lists are used for rejecting e-mail traffic.
[Black List]

White lists are used for accepting e-mail traffic.
[White List] 

If you press the Black List button you will see the following window.

If you press the White List button you will see the following window.

If you press the RBLs List button you will see the following window.

And finally If you press the SAVE button this will apply any of the changes you made, wait for confirmation message.

Usage Examples

Black Lists: REJECT

The qpsmtpd badhelo is effective in examining the SMTP HELO string and then block mail based on this string. Entries follow the following format.

something.a.somehost.com

To find the proper string to enter on the qpsmtp badhelo line. 1. Open an offending email. 2. Open the header of the email. 3. Look for a line that says, (HELO something.a.somehost.com) Partial strings will not work, E.G. in the previous example somehost.com will not work. It must be the complete HELO string.

Note:

Using qpsmtpd badhelo will stop all mail at a domain that uses that specific HELO string. It's not looking at a specific email. This strategy isn't always effective as spammers generally change this field to stop this kind of detection. Also companies have several SMTP gateways so you may see mail from mail1.domain.com and mail2.domain.com . You will then need to add both of these. The advantage however is if you do want to stop all mail from one source, it can be effective.

Alternatively you may use the ip address. Again look in the header for the Helo line. It may look something like this,

Received: from smtprelay0207.c.somehost.com (HELO smtprelay.c.somehost.com) (123.111.123.321) Now simply add the IP address you found in the HELO line.

123.111.123.321

Badmailfrom

@host or user@host

White Lists: ACCEPT

Whitelisthosts - see this post http://forums.contribs.org/index.php/topic,51429.0.html

Single IP

192.168.10.1

Subnets

192.168.10. (be careful - with no trailing . you match 192.168.100 - 192.168.109. )
192.168

WhitelistHELO

host.domain.com

Whitelistsenders

joe@foo.com
foo.com

Known Issues

See bugs below

Bugs

Please raise bugs under the SME Contribs section in bugzilla .

ID	Product	Version	Status	Summary (6 tasks) ⇒
12649	SME Contribs	11.0	CONFIRMED	SME11 remove /etc/e-smith/templates/var/service/qpsmtpd/config/badmailfrom
10472	SME Contribs	Futur	CONFIRMED	NFR Add subnet checking to whitelist hosts
10117	SME Contribs	Futur	CONFIRMED	add support for URIBL
9276	SME Contribs	8.2	CONFIRMED	design and documentation of qpsmtpd wbl vs spamassassin white or black lists
9275	SME Contribs	8.2	CONFIRMED	wbl whitelist status switch does nothing in server manager
4664	SME Contribs	7.3	CONFIRMED	Redesign wbl dbase to improve efficiency

Changelog

Only released version in smecontrib are listed here.

smeserver-wbl Changelog: SME 10 (smecontribs)

2024/03/01 Brian Read 0.5.0-9.sme
- Edit Menu entry to conform to new arrangements [SME: 12493]

2024/02/25 Jean-Philippe Pialasse 0.5.0-8.sme
- reload qpsmtpd config on panel update [SME: 12490]

- apply smeserver-wbl-0.5.0-locale-2024-02-25

2022/04/17 Jean-Philippe Pialasse 0.5.0-7.sme
- fix multiple rpm owned files [SME: 11678]

- fix long update time [SME: 11955]

2022/01/05 Brian Read 0.5.0-6.sme
- Add in class def in overall div in ep file [SME: 11828]

2021/09/08 Terry Fage 0.5.0-5.sme
- fix reference update in server manager [SME: 11687]

---