Difference between revisions of "Qpsmtpd"

From SME Server
Jump to navigationJump to search
(A place to gather configuration notes on qpsmtpd plugins...)
 
(One intermediate revision by the same user not shown)
Line 5: Line 5:
  
 
==Upgrade Considerations==
 
==Upgrade Considerations==
−
* A-Record DNSBL Services
+
===A-Record DNSBL Services===
−
: Some DNSBL services - notably b.barracudacentral.org - provide their results using a DNS "A" record instead of a DNS TXT record.  The dnsbl plugin requires these services to include a colon (":") in dnsbl_zones - however, SME used to use a colon the server separator in the configuration database.  In order to support these A-Record DNSBL services, the separator for RBLList, SBLList, and the new UBLList is now a comma. You can now configure b.barracudacentral.org using (note the single quotes):
+
: Some DNSBL services - notably b.barracudacentral.org - provide their results using a DNS "A" record instead of a DNS TXT record.  The dnsbl plugin requires these services to include a colon (":") in dnsbl_zones - however, SME used to use a colon the server separator in the configuration database.  In order to support these A-Record DNSBL services, the separator for RBLList, SBLList, and the new UBLList is now a comma.  
 +
 
 +
: You can now configure b.barracudacentral.org using (note the single quotes):
 
: <code><nowiki>config setprop qpsmtpd RBLList server1,server2,'b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>'</nowiki></code>
 
: <code><nowiki>config setprop qpsmtpd RBLList server1,server2,'b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>'</nowiki></code>
−
* DKIM & DMARC
+
 
 +
===DKIM & DMARC===
 
: DKIM & DMARC are now supported natively by SME Server.  To enable these you will need to configure appropriate DNS records in your public DNS server.
 
: DKIM & DMARC are now supported natively by SME Server.  To enable these you will need to configure appropriate DNS records in your public DNS server.
 
: There are forum reports of problems for users who had DKIM enabled using the DKIM contrib.
 
: There are forum reports of problems for users who had DKIM enabled using the DKIM contrib.
−
* URIBL
+
===URIBL===
 
: SME Server now supports URIBL - the ability to block emails that contain known malicious URLs within the body of the email.  This service is disabled by default.
 
: SME Server now supports URIBL - the ability to block emails that contain known malicious URLs within the body of the email.  This service is disabled by default.
−
* "Naughty" plugin
+
==="Naughty" plugin===
 
: SME Server is now using the 'naughty' plugin which allows early plugins like dnsbl, earlytalker, etc to indicate that the email should be rejected at a later point in the interaction.  This allows the server to log extra information for denied emails.  Specifically, emails denied by dnsbl will now show the sender and recipient email addresses in the qpsmtpd log
 
: SME Server is now using the 'naughty' plugin which allows early plugins like dnsbl, earlytalker, etc to indicate that the email should be rejected at a later point in the interaction.  This allows the server to log extra information for denied emails.  Specifically, emails denied by dnsbl will now show the sender and recipient email addresses in the qpsmtpd log
  

Revision as of 13:33, 18 May 2017

qpsmtpd

qpsmtpd has been a core component of SME Server since SME 7, providing advanced spam fighting capabilities.

SME Server 9.2 introduces qpsmtpd 0.96 with several new capabilities. At the same time, smeserver-qpsmtpd has been updated to provide additional SME Server configuration options.

Upgrade Considerations

A-Record DNSBL Services

Some DNSBL services - notably b.barracudacentral.org - provide their results using a DNS "A" record instead of a DNS TXT record. The dnsbl plugin requires these services to include a colon (":") in dnsbl_zones - however, SME used to use a colon the server separator in the configuration database. In order to support these A-Record DNSBL services, the separator for RBLList, SBLList, and the new UBLList is now a comma.
You can now configure b.barracudacentral.org using (note the single quotes):
config setprop qpsmtpd RBLList server1,server2,'b.barracudacentral.org:Blocked - see <http://bbl.barracudacentral.com/q.cgi?ip=%IP%>'

DKIM & DMARC

DKIM & DMARC are now supported natively by SME Server. To enable these you will need to configure appropriate DNS records in your public DNS server.
There are forum reports of problems for users who had DKIM enabled using the DKIM contrib.

URIBL

SME Server now supports URIBL - the ability to block emails that contain known malicious URLs within the body of the email. This service is disabled by default.

"Naughty" plugin

SME Server is now using the 'naughty' plugin which allows early plugins like dnsbl, earlytalker, etc to indicate that the email should be rejected at a later point in the interaction. This allows the server to log extra information for denied emails. Specifically, emails denied by dnsbl will now show the sender and recipient email addresses in the qpsmtpd log

Plugins

Below is a list of all the plugins from /usr/share/qpsmtpd/plugins on a freshly updated SME 9.2 server.

+ New in SME 9.2
* Improved or changed in SME 9.2
U Unused (by default) in SME Server
E Extra / External Configuration Required
CW Contrib or Wiki page exists that uses this plugin
SM Can be configured using server-manager
DB Can be configured using db variables
AC Auto-configured by SME Server


Retrieved from "https://wiki.koozali.org/index.php?title=Qpsmtpd&oldid=33427"