2,411
edits
Changes
Jump to navigation
Jump to search
mLine 4:
Line 4: − + − + + Line 14:
Line 15: − + − + Line 28:
Line 29: + + + + + + + + + + + Line 67:
Line 79: − + − + − The email receiving component of SME is called QPSMTPD. It's great because it allows us to turn plugins on or off or create our own − when we need. The GEOIP plugin is already in SME but it's turned off. I've created a RPM but it's not in any of the repos, it'attached to a bug in the bug tracker here: http://bugs.contribs.org/attachment.cgi?id=1149 − − You can download this with your desktop pc and transfer this onto your SME Server with WINSCP. If you don't know what WINSCP is, you can google it. − − Now you can install the rpm: − − rpm -Uvh smeserver-geoip-1.0.0-b1.noarch.rpm − − ==Use the GeoIP to track email== Line 105:
Line 107: − +
Reordering and updated headers
==Description==
==Description==
The GEOIP plugin lets us know where our mail server is receiving mail from. If we're receiving too much spam from a particular location, this will help track it down. We can then use that info to reject connections from that place taking the load off our server.
The GeoIP plugin lets us know where our mail server is receiving mail from. If we're receiving too much spam from a particular location, this will help track it down. We can then use that info to reject connections from that place taking the load off our server.
==Download & Install GeoIP Plugin==
==Download and install==
=== GeoIP plugin===
We need the GEOIP package and the perl interface to the program but this isn't installed on SME. We'll have to grab the packages from yum. Yum has access to different public repositories where packages are available. GEOIP is in the EXTRAS repo. We'll enable the repo and install them.
We need the GEOIP package and the perl interface to the program but this isn't installed on SME. We'll have to grab the packages from yum. Yum has access to different public repositories where packages are available. GEOIP is in the EXTRAS repo. We'll enable the repo and install them.
Yum does the magic and knows to install both the program and the interface.
Yum does the magic and knows to install both the program and the interface.
==Download & Install GeoIP Database==
=== GeoIP database ===
We also need the GEOIP DATABASE. This database is updated monthly by a company called MaxMind. We'll have to download it every month or pay for their subscription service to be accurate. The database needs to be in a specific location or it won't work. We'll change to that location.
We also need the GeoIP database. This database is updated monthly by a company called MaxMind. We'll have to download it every month or pay for their subscription service to be accurate. The database needs to be in a specific location or it won't work. We'll change to that location.
cd /
cd /
gunzip GeoIP.dat.gz
gunzip GeoIP.dat.gz
=== GeoIP qpstmpd plugin ===
The email receiving component of SME is called QPSMTPD. It's great because it allows us to turn plugins on or off or create our own
when we need. The GEOIP plugin is already in SME but it's turned off. I've created a RPM but it's not in any of the repos, it'attached to a bug in the bug tracker here: http://bugs.contribs.org/attachment.cgi?id=1149
You can download this with your desktop pc and transfer this onto your SME Server with WINSCP. If you don't know what WINSCP is, you can google it.
Now you can install the rpm:
rpm -Uvh smeserver-geoip-1.0.0-b1.noarch.rpm
==Testing==
==Testing==
GeoIP Country Edition: DK, Denmark
GeoIP Country Edition: DK, Denmark
==Download & Install the GeoIP qpstmpd plugin==
==Usage==
===Tracking e-mail===
GEOIP plugin should now do its work. Check the qpsmtpd logs and you'll see the countries from where mail is sent.
GEOIP plugin should now do its work. Check the qpsmtpd logs and you'll see the countries from where mail is sent.
See where your mail is coming from. Now ask the question, "why am I receiving thousands of email from RU -Russia? I don't even know anyone there." Good point. In addition, your server has to process all that mail, taking resources away from the server. In the next section we'll block the countries that we consider bad.
See where your mail is coming from. Now ask the question, "why am I receiving thousands of email from RU -Russia? I don't even know anyone there." Good point. In addition, your server has to process all that mail, taking resources away from the server. In the next section we'll block the countries that we consider bad.
==Use the GeoIP to block email==
===Blocking email===
Add the values to the SME CADNHO db. In our case, Russia & Poland seem to causing issues. You can type in any country codes you wish.
Add the values to the SME CADNHO db. In our case, Russia & Poland seem to causing issues. You can type in any country codes you wish.