How To See RBL SPAM Log?

[alexisb]

Hello, I've added RBL to my smtp_psa file and I have tested it's working with the test suggested by SpamHaus:

-Rt0 /usr/sbin/rblsmtpd -r sbl-xbl.spamhaus.org

However, I would like to be able to know how to see the log of blocked spam messages, the rblsmtpd with log from some other thread in this forum does not work compile under my Red Hat Enterprise 3 Server with Plesk 7.5.1.

Any suggestion on how to see the log of blocked messages by RBL?

Regards!

 

[jdstevens]

I just got rblsmtpd to log. I'm running FC2, Plesk 7.5.2. Your results may vary . Be sure to copy the old /usr/sbin/rblsmtpd file to a safe place in case you need to put it back. Ditto for /etc/xinetd.d/smtp_psa.

Get http://cr.yp.to/ucspi-tcp/ucspi-tcp-0.88.tar.gz
Get http://djbware.csi.hu/patches/ucspi-tcp-0.88.errno.patch
Get http://www.tjsi.com/rblsmtpd/rblsmtpd-syslog.tar.gz

As a normal user, unpack the packages in a "build" directory. Unpack th patch in the "build" directory for ucspi-tcp. Apply the patch:

patch -p1 < ucspi-tcp-0.88.errno.patch

Substitute rblsmtpd.c in the rblsmptd-syslog distribution for rblsmtpd.c in the ucspi-tcp build directory.

make

As root, replace /usr/sbin/rblsmptd with the new rblsmtpd in the ucspi-tcp directory. Edit /etc/xinetd.d/smtp_psa to add "-v" as a parameter to rblsmtpd.

You may want to run /usr/bin/rblsmptd to see if the usage includes the -v option and does not generate error messages. I was getting error messages until I applied the errno patch.

The log entries use syslog to put entries in /usr/local/psa/var/log/maillog.

 

[alexisb]

Thanks!

Long time I didn't visit this thread.

It worked in my RHEL 3 installation.

Thanks a lot!

 

[gumush]

can u send patched executeable file ?

 

[ShadowMan@]

Gumush - Chances are that the executable which is compiled on another server will probably not work 100% properly on your server, if at all. The instructions posted earlier are to re-compile the rblsmtpd on your particular server from the source code.

I am not saying it is entirely impossible, but you would have to find someone with a server similar enough to yours to have a hope.

If someone does supply you with the already patched and re-compiled executable, I wish you the best of luck.....

 

[albans]

If the link for the ucspi-tcp link doesn't work, you can find it here:
http://www.solutions-4u.net/files/djb/ucspi-tcp-0.88.errno.patch