On 04/20/10 12:34, Matthew Gladkikh wrote:
quoted text
> Hello folks,
> 
> My spamd setup went mad one day and I cannot figure out what is the problem -
> could you please help?
> The problem is that it automatically whitelists all the incoming connections.
> I am running openbsd in bridge mode.

Check your spamlogd setup. Without further investigation, I'd bet that's
what's causing this.

/Alexander

quoted text
> 
> bash-4.0# uname -a
> OpenBSD puffy.srv.pzi.ru 4.6 GENERIC.MP#89 i386
> 
> Part of pf.conf:
> #SPAM GRAYLISTING
> no rdr log proto tcp from <whitelist> to any port smtp
> no rdr log proto tcp from <spamd-white> to any port smtp
> no rdr log proto tcp from $int_dmz_mail to any port smtp
> rdr pass log on $ext_if proto tcp from any to any port smtp  -> 127.0.0.1 port
> spamd
> 
> bash-4.0# sysctl -a |grep forwar
> net.inet.ip.forwarding=1
> net.inet.ip.mforwarding=0
> net.inet6.ip6.forwarding=0
> net.inet6.ip6.mforwarding=0
> 
> bash-4.0# cat /etc/bridgename.bridge0
> add xl0
> add xl1
> up
> 
> bash-4.0# cat /etc/rc.conf |grep -i pf
> ospfd_flags=NO          # for normal use: ""
> ospf6d_flags=NO         # for normal use: ""
> pf=YES                  # Packet filter / NAT
> pf_rules=/etc/pf.conf           # Packet filter rules file
> pflogd_flags=                   # add more flags, ie. "-s 256"
> 
> bash-4.0# cat /etc/rc.conf |grep -i spam
> #spamd_flags=""         # for normal use: "" and see spamd(8)
> spamd_flags="-vl 127.0.0.1 -n Postfix"
> spamd_black=""         # set to YES to run spamd without greylisting
> spamlogd_flags=""       # use eg. "-i interface" and see spamlogd(8)
> 
> even if I set spamd_black="YES" it whitelist all the hosts...
> 
> 
> Could you please help me to find the source of the problem?
> 
> Cheers,
> Matt