Difference between revisions of "Email Whitelist-Blacklist Control"

yum install --enablerepo=smecontribs smeserver-wbl

yum install --enablerepo=smecontribs smeserver-wbl

signal-event console-save

signal-event post-upgrade; signal-event reboot

yum --enablerepo smecontribs install smeserver-wbl

signal-event console-save

signal-event post-upgrade; signal-event reboot

RBL's List is used to adjust DNSBL and RHSBL.
[RBLs List]

Black lists are used for rejecting e-mail traffic.
[Black List]

White lists are used for accepting e-mail traffic.
[White List] 

Format:
 some.host.domain

Matches in the <badhelo> config file, including yahoo.com and aol.com, which neither the real Yahoo or the real AOL use, but which spammers use a lot.
Like qmail with the qregex patch, the <badhelo> file can also contain perl regular expressions. In addition to normal regexp processing, a pattern can start with a ! character, and get a negated (!~) match.

Format:
 @host or user@host

This plugin also supports regular expression matches. This allows special patterns to be denied (e.g. FQDN-VERP, percent hack, bangs, double ats).
Patterns are stored in the format pattern(\s+)response, where pattern is a Perl pattern expression. Don't forget to anchor the pattern (front ^ and back $) if you want to restrict it from matching anywhere in the string.

192.168.10.1

192.168.10. (be careful - with no trailing . you match 192.168.100 - 192.168.109. )
192.168

host.domain.com

joe@foo.com
foo.com

@@ Line 1: / Line 1: @@
+{{Languages}}
 ===Maintainer===
-Originally developed by Darrell May.
+Originally developed by Darrell May.<br />
 [mailto:stephdl@de-labrusse.fr stephdl] Stéphane de Labrusse AKA [[User:stephdl|Stephdl]]<br />
 === Version ===
 {{ #smeversion: smeserver-wbl }}
@@ Line 18: / Line 22: @@
 Install of the lastest Email Whitelist-Blacklist package is from the smecontribs repo:
-. Install package:
+=====Install package:=====
-*'''For SME 8'''
+<tabs container><tab name="For SME 10">
-  yum --enablerepo smecontribs install smeserver-wbl
+  yum install --enablerepo=smecontribs smeserver-wbl
-* '''For SME 9'''
+</tab>
+<tab name="For SME 9">
   yum install --enablerepo=smecontribs smeserver-wbl
+Reconfigure machine:
+ signal-event console-save
+or if you prefer to reboot your server
+ signal-event post-upgrade; signal-event reboot
-. Reconfigure machine:
+</tab>
+<tab name="For SME 8">
+ yum --enablerepo smecontribs install smeserver-wbl
+Reconfigure machine:
   signal-event console-save
 or if you prefer to reboot your server
   signal-event post-upgrade; signal-event reboot
+</tab>
+</tabs>
+=====Configure:=====
+Once you do this a new menu item will be visable in the Server-Manager on the left hand side, called '''E-mail WBL'''. Traffic is scanned and may be blocked due to the various screening methods enabled. Clicking on this will present you with 3 buttons.
+You may use this panel to define e-mail white/black lists and RBLs.
+ RBL's List is used to adjust DNSBL and RHSBL.
+ '''[RBLs List]'''
-Once you do this a new menu item will be visable in the Server-Manager on the left hand side, called E-mail WBL. Clicking on this will present you with 3 buttons.
- '''E-mail WBL'''
- E-mail traffic is scanned and may be blocked due to the various screening methods enabled.
- You may use this panel to define e-mail white/black lists.
   Black lists are used for rejecting e-mail traffic.
-  '''[REJECT]'''
+  '''[Black List]'''
   White lists are used for accepting e-mail traffic.
-  '''[ACCEPT]'''
+  '''[White List]'''
- When completed entering wbls above you must execute the email-update event to restart
- services and load in your changes.
+If you press the Black List button you will see the following window.
- '''[UPDATE]'''
-If you press the REJECT button you will see the following window.
 [[File:email-Reject.jpg]]
-If you press the Accept button you will see the following window.
+If you press the White List button you will see the following window.
-[[File:Email-accept.jpg]]
+[[File:Email-accept.jpg|842px]]
-And finally If you press the UPDATE button you will simply be presented with one button to;
+If you press the RBLs List button you will see the following window.
- Execute the email-update event now to restart services and load in your changes.
+[[File:Wbl rbl.jpg|842px]]
-This will apply any of the changes you made in the Reject or Accept windows.
+And finally If you press the SAVE button this will apply any of the changes you made, wait for confirmation message.
 ===Usage Examples===
-Black Lists: REJECT
+====Black Lists: REJECT====
-The '''qpsmtpd badhelo''' is effective in examining the SMTP HELO string and then block mail based on this string.  Entries follow the following format.
+=====Plugin: Helo=====
- something.a.somehost.com
-To find the proper string to enter on the qpsmtp badhelo line. 1. Open an offending email. 2. Open the header of the email. 3. Look for a line that says,
-(HELO something.a.somehost.com)
-Partial strings will not work, E.G. in the previous example somehost.com will not work. It must be the complete HELO string.
-{{Note box|Using qpsmtpd badhelo will stop all mail at a domain that uses that specific HELO string. It's not looking at a specific email. This strategy isn't always effective as spammers generally change this field to stop this kind of detection. Also companies have several SMTP gateways so you may see mail from mail1.domain.com and mail2.domain.com . You will then need to add both of these. The advantage  however is if you do want to stop all mail from one source, it can be effective. }} Alternatively you may use the ip address. Again look in the header for the Helo line. It may look something like this,
-Received: from smtprelay0207.c.somehost.com (HELO smtprelay.c.somehost.com) '''(123.111.123.321''')
-Now simply add the IP address you found in the HELO line.
-.111.123.321
-White Lists: ACCEPT
+ Format:
+  some.host.domain
+Add domains, hostnames, or perl regexp patterns to the <badhelo> config file; one per line.
+{{Note box|You cannot block HELO IP addresses with this plugin. It is not designed to do that. Please look at other methods such as direct IP blocking via the firewall, or contribs like Fail2ban, GeoIP, xt_tables}}
+https://github.com/smtpd/qpsmtpd/blob/master/plugins/helo
+ Matches in the <badhelo> config file, including yahoo.com and aol.com, which neither the real Yahoo or the real AOL use, but which spammers use a lot.
+ Like qmail with the qregex patch, the <badhelo> file can also contain perl regular expressions. In addition to normal regexp processing, a pattern can start with a ! character, and get a negated (!~) match.
+=====Plugin: Badmailfrom=====
+ Format:
+  @host or user@host
+ This plugin also supports regular expression matches. This allows special patterns to be denied (e.g. FQDN-VERP, percent hack, bangs, double ats).
+ Patterns are stored in the format pattern'''(\s+)'''response, where pattern is a Perl pattern expression. Don't forget to anchor the pattern (front ^ and back $) if you want to restrict it from matching anywhere in the string.
+https://github.com/smtpd/qpsmtpd/blob/master/plugins/badmailfrom
+====White Lists: ACCEPT====
-Whitelisthosts - see this post http://forums.contribs.org/index.php/topic,51429.0.html
+=====Whitelisthosts=====
+see this post http://forums.contribs.org/index.php/topic,51429.0.html
 Single IP
@@ Line 77: / Line 115: @@
 .168
-WhitelistHELO
+=====WhitelistHELO=====
   host.domain.com
-Whitelistsenders
+=====Whitelistsenders=====
   joe@foo.com
-  @foo.com
+  foo.com
+=== Known Issues ===
-=== Known Issues ===
+See bugs below
-qpsmptd dnsbl rejects mail despite sender being listed in whitelistsenders and whitelisthelo
-[[bugzilla:8327]]
-[[bugzilla:8747]]
 === Bugs ===
 Please raise bugs under the SME Contribs section in {{BugzillaFileBug|product=SME%20Contribs|component=smeserver-wbl|title=bugzilla}}.
 {{#bugzilla:columns=id,product,version,status,summary |sort=id |order=desc |component=smeserver-wbl |noresultsmessage="No open bugs found."}}
+===Changelog===
+Only released version in smecontrib are listed here.
+{{#smechangelog: smeserver-wbl}}
 ----
 [[Category: Contrib]]
 [[Category: Mail]]
 [[Category: Administration:Content Spam Virus Blocking]]

ID	Product	Version	Status	Summary (6 tasks) ⇒
12649	SME Contribs	11.0	CONFIRMED	SME11 remove /etc/e-smith/templates/var/service/qpsmtpd/config/badmailfrom
10472	SME Contribs	Futur	CONFIRMED	NFR Add subnet checking to whitelist hosts
10117	SME Contribs	Futur	CONFIRMED	add support for URIBL
9276	SME Contribs	8.2	CONFIRMED	design and documentation of qpsmtpd wbl vs spamassassin white or black lists
9275	SME Contribs	8.2	CONFIRMED	wbl whitelist status switch does nothing in server manager
4664	SME Contribs	7.3	CONFIRMED	Redesign wbl dbase to improve efficiency

Difference between revisions of "Email Whitelist-Blacklist Control"

Revision as of 16:35, 10 November 2021

Contents

Maintainer

Version

Description

Installation

Install package:

Configure:

Usage Examples

Black Lists: REJECT

Plugin: Helo

Plugin: Badmailfrom

White Lists: ACCEPT

Whitelisthosts

WhitelistHELO

Whitelistsenders

Known Issues

Bugs

Changelog

Navigation menu

Page actions

Page actions

Personal tools

Koozali SME Server

Recent activities

Koozali resources

Koozali SME Server wiki

Tools

Search

	Note:
	You cannot block HELO IP addresses with this plugin. It is not designed to do that. Please look at other methods such as direct IP blocking via the firewall, or contribs like Fail2ban, GeoIP, xt_tables