Limiting the number of emails sent by a given auth-user/domain/IP

rcptcheck-relaylimit known bug fix

Tony Fung October 7, 2020 06:35

Hi Roberto,

Regarding to the known bug, I modified line 55 in "rcptcheck-overlimit.sh" as underneath and works well on CentOs 8.2:

-value=$(eval ${PREFILTER} | grep -Fi "$FILTEREDSMTPAUTHUSER:" | tail -1); limit="${value##*:}" # specific authuser
+value=$(eval ${PREFILTER} | grep -i ^"$FILTEREDSMTPAUTHUSER:" | tail -1); limit="${value##*:}" # specific authuser

After that, "info@example.com" does not match "testinfo@example.com". Hope this can help.

Reply | Permalink

rcptcheck-relaylimit known bug fix

Roberto Puzzanghera Tony Fung August 22, 2021 10:35

Tony, I hope you can read this.

The above modification is not distinguishing users belonging to same domain here...

I'm restoring the original version for the time being.

For anyone interested in doing tests this is the modified version and this is the original script by Luca Franceschini

Reply | Permalink

rcptcheck-relaylimit known bug fix

Roberto Puzzanghera Tony Fung October 8, 2020 16:21

Great! Thank you

Reply | Permalink

Dash in relaylimits

Clemens May 2, 2019 11:39

At the moment, the users listed in /var/qmail/control/relaylimits are without the dash(es) in user and domain part, because the script trims them away:

echo "foo@bar-dings.de" | tr -cd '[:alnum:].-@'
foo@bardings.de

I think the dash-char has to be escaped in the script to keep the dash-char, because the dash-char is used to define character-ranges (http://linuxcommand.org/lc3_man_pages/tr1.html)

echo "foo@bar-dings.de" | tr -cd '[:alnum:].\-@'
foo@bar-dings.de

Reply | Permalink

Dash in relaylimits

Roberto Puzzanghera Clemens May 6, 2019 17:43

Corrected. Thanks for the contribution

Reply | Permalink

usage report

Sam Tang January 19, 2019 02:02

Hi,

Thanks for your information, I would like to share a tips for usage report.

Add this to crontab:

59 2 * * * /usr/bin/ls -lS /var/qmail/overlimit/ | /usr/bin/grep vpop | /usr/bin/awk '{ print $5" "$9 }' | /usr/bin/column -t | /usr/bin/mail -s "Overlimit Stats" you@youremail.com > /dev/null 2>&1

change the email "you@youremail.com" to your email address, then everynight will send an email report to administrator.

Reply | Permalink

usage report

Roberto Puzzanghera Sam Tang January 19, 2019 08:12

Thank you. I'll check it out.

Reply | Permalink

rcptcheck with starttls

Ryan November 30, 2018 00:12

Hi there,

Always thankful for this great documentation.

Rencently I found this rcptcheck patch and tried to apply my mail server.

Everything looks fine without any error during patching and compiling.

But once it's applied, starttls doesn't work with this new patch.(I used combined patch, not this patch separately.- the combined patch is also containing this rcptcheck, right?)

qmail-smtpd and qmail-submission (I'm using it as qmail-smtpd-ssl) are actually running.

But if I try to access with starttls it's not accessbie like below.(nothing shows after "CONNECTED").

ryan-PC:~# openssl s_client -starttls smtp -crlf -connect my-server-ip:587
CONNECTED(00000003)

So, I had to rolled back to the old patch...

Do you have any idea?

Thanks in advance.

Reply | Permalink

rcptcheck with starttls

Roberto Puzzanghera Ryan November 30, 2018 13:13

How did you configured submission as qmail-smtpd-ssl?

Reply | Permalink

rcptcheck with starttls

Ryan Roberto Puzzanghera December 2, 2018 19:43

Hi Roberto,

This is the run file of qmail-smtp-ssl.

#!/bin/sh

QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`

# You MUST export this, otherwise you'd get a 30 sec timeout
export SMTPAUTH="!"

# This enables greetdelay for qmail-smtpd.
#export SMTPD_GREETDELAY=5

# This enables chkuser
export CHKUSER_START=ALWAYS

# This enables simscan debug
#export SIMSCAN_DEBUG=2
#export QMAILQUEUE=/var/qmail/bin/qmail-dkim
#export DKIMVERIFY="FGHIKLMNOQRTVWjpu"
# This is to avoid verification of outgoing messages
#export RELAYCLIENT_NODKIMVERIFY=1

exec /usr/local/bin/softlimit -m 100000000 \
 /usr/local/bin/tcpserver -v -H -R -l 0 \
 -x /home/vpopmail/etc/tcp.submission.cdb -c "$MAXSMTPD" \
 -u "$QMAILDUID" -g "$NOFILESGID" 0 587 \
 /var/qmail/bin/qmail-smtpd \
 /home/vpopmail/bin/vchkpw /usr/bin/true 2>&1

Thanks,

Reply | Permalink

rcptcheck with starttls

Roberto Puzzanghera Ryan December 3, 2018 20:27

Honestly I don't know what might be the cause... I also tried to configure qmail-submission as qmail-smtpd-ssl and it works here...

Reply | Permalink