Menu
▾
▴
flexguard-devel — development mailing list for the flexguard project
You can subscribe to this list here.
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(23) |
Dec
(6) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 |
Jan
|
Feb
(16) |
Mar
(52) |
Apr
(32) |
May
(29) |
Jun
(11) |
Jul
(20) |
Aug
(9) |
Sep
(23) |
Oct
(30) |
Nov
(31) |
Dec
(34) |
| 2007 |
Jan
(49) |
Feb
(54) |
Mar
(67) |
Apr
(51) |
May
(23) |
Jun
(27) |
Jul
(51) |
Aug
(57) |
Sep
(37) |
Oct
(13) |
Nov
(22) |
Dec
(22) |
| 2008 |
Jan
(20) |
Feb
(14) |
Mar
(31) |
Apr
(64) |
May
(65) |
Jun
(182) |
Jul
(169) |
Aug
(40) |
Sep
(68) |
Oct
(124) |
Nov
(113) |
Dec
(142) |
| 2009 |
Jan
(136) |
Feb
(131) |
Mar
(158) |
Apr
(122) |
May
(204) |
Jun
(154) |
Jul
(110) |
Aug
(64) |
Sep
(106) |
Oct
(148) |
Nov
(149) |
Dec
(138) |
| 2010 |
Jan
(97) |
Feb
(75) |
Mar
(139) |
Apr
(131) |
May
(141) |
Jun
(159) |
Jul
(117) |
Aug
(100) |
Sep
(124) |
Oct
(81) |
Nov
(95) |
Dec
(78) |
| 2011 |
Jan
(86) |
Feb
(65) |
Mar
(71) |
Apr
(53) |
May
(83) |
Jun
(50) |
Jul
(41) |
Aug
(38) |
Sep
(76) |
Oct
(80) |
Nov
(96) |
Dec
(86) |
| 2012 |
Jan
(54) |
Feb
(58) |
Mar
(76) |
Apr
(64) |
May
(80) |
Jun
(72) |
Jul
(156) |
Aug
(96) |
Sep
(131) |
Oct
(173) |
Nov
(215) |
Dec
(80) |
| 2013 |
Jan
(80) |
Feb
(68) |
Mar
(52) |
Apr
(41) |
May
(55) |
Jun
(33) |
Jul
(47) |
Aug
(74) |
Sep
(34) |
Oct
(45) |
Nov
(25) |
Dec
(94) |
| 2014 |
Jan
(87) |
Feb
(79) |
Mar
(100) |
Apr
(104) |
May
(107) |
Jun
(82) |
Jul
(42) |
Aug
(29) |
Sep
(24) |
Oct
(57) |
Nov
(37) |
Dec
(38) |
| 2015 |
Jan
(30) |
Feb
(25) |
Mar
(30) |
Apr
(49) |
May
(78) |
Jun
(92) |
Jul
(41) |
Aug
(23) |
Sep
(24) |
Oct
(16) |
Nov
(18) |
Dec
(22) |
| 2016 |
Jan
(51) |
Feb
(44) |
Mar
(31) |
Apr
(37) |
May
(17) |
Jun
(18) |
Jul
(32) |
Aug
(49) |
Sep
(88) |
Oct
(76) |
Nov
(60) |
Dec
(68) |
| 2017 |
Jan
(76) |
Feb
(29) |
Mar
(46) |
Apr
(42) |
May
(40) |
Jun
(34) |
Jul
(155) |
Aug
(62) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <na...@ma...> - 2005-11-25 01:55:06
|
中根です。 At Fri, 25 Nov 2005 10:41:52 +0900, Takuo KITAME wrote: > 報告ありがとうございます。 > こちらでまず再現性を調べてみます。 > > 2005-11-23 (水) の 13:07 +0900 に Tetsuhiro Nakane さんは書きました: > > 中根と申します。 > > > > 先日は libsmtpguard1 の .deb をおいて頂き有難うございました。 > > > > debian sarge で動かしてみたのですが、時おり > > > > Nov 23 12:06:34 ellora postfix/smtpguard[13894]: error: > > fg_spam_update_db(8): Invalid protocol: read unexpected EOF. > > > > のようなエラーが出て smtpguard-daemon が止まります。 > エンベロープの from を空にすると、このエラーが発生します。 $ telnet XXXXXXXXXXXXX 25 Trying XXXXXXXXXX... Connected to XXXXXXXXXXXX. Escape character is '^]'. 220 mailgw1.example.co.jp ESMTP Postfix helo threepio 250 mailgw1.example.co.jp mail from: <> 250 Ok rcpt to: na...@ma... 450 <na...@ma...>: Recipient address rejected: Server configuration error. quit 221 Bye Connection closed by foreign host. Nov 25 10:47:36 XXXXX postfix/smtpguard[1578]: error: fg_spam_update_db(8): Invalid protocol: read unexpected EOF. Nov 25 10:47:36 XXXXX postfix/smtpd[1409]: NOQUEUE: reject: RCPT from unknown[10.1.16.32]: 450 <na...@ma...>: Recipient address rejected: Server configuration error.; from=<> to=<na...@ma...> proto=SMTP helo=<threepio> |
|
From: Takuo K. <ki...@va...> - 2005-11-25 01:42:02
|
報告ありがとうございます。 こちらでまず再現性を調べてみます。 2005-11-23 (水) の 13:07 +0900 に Tetsuhiro Nakane さんは書きました: > 中根と申します。 > > 先日は libsmtpguard1 の .deb をおいて頂き有難うございました。 > > debian sarge で動かしてみたのですが、時おり > > Nov 23 12:06:34 ellora postfix/smtpguard[13894]: error: > fg_spam_update_db(8): Invalid protocol: read unexpected EOF. > > のようなエラーが出て smtpguard-daemon が止まります。 [...] -- Takuo Kitame <ki...@va...> VA Linux Systems Japan K.K. |
|
From: <na...@ma...> - 2005-11-23 04:07:31
|
中根と申します。 先日は libsmtpguard1 の .deb をおいて頂き有難うございました。 debian sarge で動かしてみたのですが、時おり Nov 23 12:06:34 ellora postfix/smtpguard[13894]: error: fg_spam_update_db(8): Invalid protocol: read unexpected EOF. のようなエラーが出て smtpguard-daemon が止まります。 $ sudo -u smtpguard /usr/sbin/smtpguard-daemon -d 2 /etc/smtpguard/smtpguard.conf で debug してみると --- debug: disp_smtpdb_data: mtime:1132715193 debug: disp_smtpdb_data: SC=16 debug: disp_smtpdb_data: FC=16 debug: disp_smtpdb_data: TC=16 debug: disp_smtpdb_data: P=560 debug: disp_smtpdb_data: status:0 debug: disp_smtpdb_data: ##### data end ##### info: 13747 13857 222.171.73.26 sqg...@cp... nak...@ex... 560 debug: spam_context_variable: F (null) セグメンテーション違反です --- となって止まるようです。 $ LANG=C dpkg -l postfix postfix-smtpguard smtpguard libsmtp* Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) ||/ Name Version Description +++-================-================-================================================ ii postfix 2.1.5-9 A high-performance mail transport agent ii postfix-smtpguar 1.1.1-1 smtpguard policy service daemon for Postfix ii smtpguard 1.1.1-1 smtp flow control ii libsmtpguard1 1.1.1-1 Shared library of smtpguard ---- Tetsuhiro Nakane mailto:na...@ma... |
|
From: Eric L. <er...@or...> - 2005-11-21 23:13:15
|
I am attempting to install flexguard on a FC4 machine. During the configure, I get: checking for Berkley DB Version... configure: error: Need Berkley DB version 4.2 FC4 uses libdb version 4.3 . Does the configure look for 4.2 specifically? Can I use 4.3? If so, how do I get the configure to work with 4.3? -- Eric |
|
From: Alexander R. <al...@va...> - 2005-11-18 12:54:05
|
Hello Dieter, Please let us know if you end up using smtpguard. > Thanks for all your help in the past. Though, one more question. Is there > a reason to use bdb 4.2 in stead of 4.1 ? Which functionality exactly are > you aiming at? If you could read Japanese, the answer is actually already there. ;) I really need to translate that bit... anyway, smtpguard uses two keys to search for data: 1. IP address (btree db) 2. record deletion time (secondary btree db) In order to do this bdb must support secondary indices. Also, in order to allow multiple processes to access the db, the concurrent data store feature is used. That's why we use 4.2. I'm not sure if 4.1 supports these features; you could check. If it does, you should be able to use 4.1. Let us know what you find. Alexander Reeder |
|
From: Dieter V. <d.v...@co...> - 2005-11-18 08:00:15
|
Hi Alexander, Thanks for all your help in the past. Though, one more question. Is there a reason to use bdb 4.2 in stead of 4.1 ? Which functionality exactly are you aiming at? Cheers |
|
From: Takuo K. <ki...@va...> - 2005-11-18 07:42:36
|
2005-11-18 (金) の 15:24 +0900 に Tetsuhiro Nakane さんは書きました: > Now I'm installing smtpguard on debian box. > > smtpguard depending on "libsmtpguard1", > but there is no file on sourceforge. > where is libsmtpguard1 deb file ? > > $ LANG=C sudo dpkg -i smtpguard_1.1.1-1_i386.deb > (Reading database ... 25959 files and directories currently installed.) > Preparing to replace smtpguard 1.1.1-1 (using smtpguard_1.1.1-1_i386.deb) ... > Unpacking replacement smtpguard ... > dpkg: dependency problems prevent configuration of smtpguard: > smtpguard depends on libsmtpguard1 (>= 1.1.0); however: > Package libsmtpguard1 is not installed. > dpkg: error processing smtpguard (--install): > dependency problems - leaving unconfigured > Errors were encountered while processing: > smtpguard Sorry, I've forgotten to register the file with release. Fixed now. check it. Regards. -- Takuo Kitame <ki...@va...> VA Linux Systems Japan K.K. |
|
From: <na...@ma...> - 2005-11-18 06:54:40
|
Now I'm installing smtpguard on debian box. smtpguard depending on "libsmtpguard1", but there is no file on sourceforge. where is libsmtpguard1 deb file ? $ LANG=C sudo dpkg -i smtpguard_1.1.1-1_i386.deb (Reading database ... 25959 files and directories currently installed.) Preparing to replace smtpguard 1.1.1-1 (using smtpguard_1.1.1-1_i386.deb) ... Unpacking replacement smtpguard ... dpkg: dependency problems prevent configuration of smtpguard: smtpguard depends on libsmtpguard1 (>= 1.1.0); however: Package libsmtpguard1 is not installed. dpkg: error processing smtpguard (--install): dependency problems - leaving unconfigured Errors were encountered while processing: smtpguard ---- Tetsuhiro Nakane mailto:na...@ma... |
|
From: Alexander R. <al...@va...> - 2005-11-17 02:54:37
|
Hello Dieter, Let me add a few comments to Mariano's remarks. > I work for a big Belgian ISP and looking in to spam-filters at the moment > because we get on average a 3500000 mail/day and an average of 3 > spam-attacks a day ( queues get up to 250000 per server!). We currently > have a commercial solution for the spamming-problem but the servers ( 9 > high-end dual-cpu/core processors with 2GB of RAM ) don't seem to get up > with the load this software is causing. 250000 msgs per server. Ouch. Can you link these spam attacks to a few IP addresses? > Can you tell me first of all if the smtp-guard is cpu/mem-friendly? Yes, it is CPU and memory friendly. Well, I say that, but it really depends on smtpguards settings. When you configure smtpguard you decide on an expire time for the bdb (15 minutes by default). This more or less determines the memory footprint of smtpguard. In your case, 3500000/24h = 145833/1h = 9722 msgs/900s You have 9 servers, which I assumed are load balanced, so 9722/9 = 1080 msgs/server Each entry in the bdb is about 100 bytes (actually, less than that) 100*1080 = 108k So your bdb, which is stored in memory for speed, should never get over one mb in size; which I would say its memory friendly. As to being CPU friendly, smtpguard does simple math and operations on a bdb, and is thus very light. However, in the end it depends on how much mail a server is pushing. > Also I would like to know which algorithms you are using with your > software. And if you are using multiple 'checkers'. As Mariano said, smtpguard doesn't do content checking. If you are trying to keep spam out of users mailboxes, smtpguard probably isn't for you. However, if you are trying to prevent focused spam attacks (like the ones above), that is exactly what smtpguard is made for. > Also, is there a way to get support on the smtp-guard? The only company I know of (disclaimer: I work here) that supports smtpguard commerically is VA Linux Japan. Alexander Reeder |
|
From: Dieter V. <d.v...@co...> - 2005-11-16 07:32:14
|
Hi, First of all I must say this project looks promising. But yet, I too have som e questions. I have read carefully both the websites docs and the reply you sent Mariano Absatz on his questions. I work for a big Belgian ISP and looking in to spam-filters at the moment because we get on average a 3500000 mail/day and an average of 3 spam-attacks a day ( queues get up to 250000 per server!). We currently have a commercial solution for the spamming-problem but the servers ( 9 high-end dual-cpu/core processors with 2GB of RAM ) don't seem to get up with the load this software is causing. Can you tell me first of all if the smtp-guard is cpu/mem-friendly? Also I would like to know which algorithms you are using with your software. And if you are using multiple 'checkers'. Also, is there a way to get support on the smtp-guard? Kind regards Dieter Verhelst |
|
From: Alexander R. <al...@va...> - 2005-11-11 09:13:16
|
Hello! > I just found out about smtpguard and it seems quite interesting... I > read the description in http://flexguard.sourceforge.net/ and > downloaded the source, but the (few) architectural docs seem to be in > Japanese, which I can't see, and installing Japanese fonts won't help > since I wouldn't understand it anyway :-) :) I think the main English documents is DOCS/smtpguard-description.txt which is basically the same as the webpage. Details for running the applications are in English at the beginning of the other documents. I need to get to translating these, but regretfully only as time permits. > This list seems completely empty with only a test message in it... Is > there anybody out there? Well, the project just started a few days ago... hopefully it will pick up! This is an open ML, and there are a few of us here. > I'd really like to know how smtpguard works... I might even get people > to work in it to adapt it to other MTAs... it seems only postfix > integration was developed, but then, I couldn't find much to read :-( I hope so. Yes, so far only postfix support has been developed. It would be nice to see support for other MTA's. - a detailed design doc - how to for hooking into MTA's is needed. Any other docs (besides man pages) which you think would be useful? > A few starting questions, though... the aim of the product seems to be > large ISPs with millions of messages per day... how do you handle a > bunch of MTAs working in paralell? BDB is not very friendly for these > kind of things... Well... put simply: we don't. :) Just kidding. We use BDB with dual indices (IP and TIME). This is very fast for storing and retrieving information which is why we use it. Usually data is stored for only 15 minutes, so the DB shouldn't get too large; maybe about 4MB which is kept in RAM. Now, as you point out BDB doesn't work when you want to share data between servers. The idea is you have a BDB locally on each MTA. We assume the MTAs are load balanced, which means each MTA should get roughly the same amount of traffic. When making your rules, divide them by the number of MTAs. For example, you don't want to allow a user to send over 1000 messages. If you have 10 MTAs, 1000/10 = 100 point limit on each MTA. This method isn't perfect, but it works. Regretfully it means you have to change your settings if you add another 5 MTA's. Using something like tdb to keep things up to date across the MTAs is on the todo list (well, it should be). Thanks, Alexander Reeder |
|
From: Mariano A. <el...@gm...> - 2005-11-10 17:21:36
|
Hi there, I just found out about smtpguard and it seems quite interesting... I read the description in http://flexguard.sourceforge.net/ and downloaded the source, but the (few) architectural docs seem to be in Japanese, which I can't see, and installing Japanese fonts won't help since I wouldn't understand it anyway :-) This list seems completely empty with only a test message in it... Is there anybody out there? I'd really like to know how smtpguard works... I might even get people to work in it to adapt it to other MTAs... it seems only postfix integration was developed, but then, I couldn't find much to read :-( A few starting questions, though... the aim of the product seems to be large ISPs with millions of messages per day... how do you handle a bunch of MTAs working in paralell? BDB is not very friendly for these kind of things... Regards. -- Mariano Absatz - El Baby el (dot) baby (AT) gmail (dot) com el (punto) baby (ARROBA:@) gmail (punto) com |
|
From: Alexander R. <al...@va...> - 2005-11-09 07:30:02
|
test |
5907 messages has been excluded from this view by a project administrator.
