QmailToaster - User contributions [en]

Spamdyke

2026-06-13T23:36:42Z

Ebroch: /* Statistics */

[[Configuration#SPF|Back]] 
== Background ==
Spamdyke provides pre-transmission spam filtering, and should be used in addition to SpamAssassin, which provides post-transmission spam filtering. Spamdyke is available from [http://www.spamdyke.org/ the spamdyke website]. See that site for details.

While a few of spamdyke's capabilities are already provided with the stock QMail-Toaster, spamdyke provides some additional spam fighting capabilities such as graylisting and enhanced blacklist/whitelist processing.

Spamdyke is a program that sits between the tcpserver and qmail-smtp processes (a pipe in 'nix lingo), so its implementation does not require patching or recompiling of qmail.

It is anticipated that spamdyke will become part of the stock QMail-Toaster no later than version 2, and hopefully in version 1.4. Meanwhile, here are some notes about using spamdyke with your existing QMail-Toaster.

== Installation ==

Spamdyke is automatically installed with qmailtoaster

== Configuration ==
spamdyke's configuration file is located at /etc/spamdyke/spamdyke.conf. spamdyke reads its configuration file every time a new connection is made. For this reason, it is never necessary to restart qmail after making changes to spamdyke's configuration file.

spamdyke's documentation provides full details on all of spamdyke's features and configuration options. Documentation for the latest version is available here: [http://www.spamdyke.org/documentation/README.html README file]

=== Graylisting ===
The install script sets up all of the domains in /var/qmail/control/rcpthosts and morercpthosts for graylisting. If you have local domains that you don't want graylisting enabled for, simply remove the associated /var/spamdyke/graylist/domain directory.
=== RBLs ===
DNS RBLs are checked by spamdyke instead of the rblsmtpd program. Check to see that the RBLs specified in your /var/qmail/control/blacklists file are included in /etc/spamdyke/spamdyke.conf as check-dnsrbl parameters.
=== reject-ip-in-cc-rdns ===
This option is commented out in the configuration file that is generated by the installation script. It is useful for most US domains, whose users rarely correspond with international addresses. To enable this option, simply uncomment it in the /etc/spamdyke/spamdyke.conf file.

If this option is not appropriate in your situation (non-US or domains with international traffic), you might want to consider using the "ip-in-rdns-keyword-file" option instead, listing the country codes you want to filter in the /etc/spamdyke/blacklist_keywords file that is created by the installation script.
== Troubleshooting ==
There are no known troubleshooting issues as of this writing. If you have any problems, contact the qmailtoaster or spamdyke email list (but please, not both).
== Disable ==
If you need to disable spamdyke, run the following commands:
# cd /var/qmail/supervise/smtp
# qmailctl stop
# cp -p run run.spamdyke && mv run run.nospamdyke
# sed -i '/$SPAMDYKE --config-file $SPAMDYKE_CONF \\/d' ./run.nospamdyke
# ln -s run.nospamdyke run
# qmailctl start

== Enable ==
# cd /var/qmail/supervise/smtp
# qmailctl stop
# unlink run
# ln -s run.spamdyke run
# qmailctl start

== Statistics ==

From the [http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg32310.html qmailtoaster user list archive]:

* Create folder /usr/share/qmt/scripts
* You also need to create a folder called tmp in /usr/share/qmt/scripts
* Remember to save all scripts in the folder /usr/share/qmt/scripts
* Save this [https://qtp.qmailtoaster.org/bin/spamdyke-stats spamdyke-stats] script in that folder and chmod +x the filename
# wget -P /usr/local/bin --no-check-certificate https://qtp.qmailtoaster.org/bin/spamdyke-stats
# chmod +x /usr/local/bin/spamdyke-stats
* Test the script by running as root:
# cat /var/log/maillog | spamdyke-stats
* If running correctly, will generate below output:
747 89.14% ALLOWED
46 5.48% DENIED_OTHER
40 4.77% DENIED_RBL_MATCH
--------------- Breakdown ---------------
-----------------------------------------
4 0.47% DENIED_SENDER_NO_MX
1 0.11% TIMEOUT

---------------- Summary ----------------
Allowed: 747 89.14%
Timeout: 1 0.11%
Errors : 0 0.00%
Denied : 90 10.73%
Total : 838 100.00%
* Save this [http://pastebin.com/aaPTcR8x Spamdyke-Stats-Report.pl] script in the same folder and chmod +x the filename
* Install some Perl libraries:
yum install perl-Time-TAI64 perl-Date-Calc
* Edit the Spamdyke-Stats-Report.pl script and set $MachineName with your servername and $MailTo with your email address
* Test the script by running as root and check your mailbox:
# /usr/share/qmt/scripts/Spamdyke-Stats-Report.pl
* Add it to crontab:
05 00 * * * root /usr/share/qmt/scripts/Spamdyke-Stats-Report.pl 2>&1 > /dev/null

== Spamdyke QRV ==

Spamdyke's chkuser replacement
# wget https://www.spamdyke.org/releases/spamdyke-5.0.1.tgz
# tar zxvf spamdyke-5.0.1.tgz
# cd spamdyke-5.0.1/spamdyke-qrv
# VALIAS_PATH=/home/vpopmail/bin/valias VUSERINFO_PATH=/home/vpopmail/bin/vuserinfo ./configure --with-vpopmail-support --with-excessive-output
# make install
# mv /usr/local/bin/spamdyke-qrv /opt/spamdyke/bin
# chmod u+s /opt/spamdyke/bin/spamdyke-qrv
# ln -s /opt/spamdyke/bin/spamdyke-qrv /usr/bin/spamdyke-qrv
# vi /etc/spamdyke/spamdyke.conf (Add settings)
reject-recipient=unavailable
recipient-validation-command=/usr/bin/spamdyke-qrv -v -d
# vi /home/vpopmail/domains/mydomain.com/.qmail-default (Edit)
|/home/vpopmail/bin/vdelivermail '' bounce-no-mailbox

Control Files by Name

2026-04-30T14:20:37Z

Ebroch:

[[Configuration#Control Files|Back]] 
Here is a table of control files in the '''/var/qmail/control''' directory listed alphabetically, with their defaults ('-' = none), whether or not they're included in the basic Qmail-Toaster, and the modules they are used by.

Note, default values are Qmail-Toaster defaults, not necessarily qmail defaults.

{| border="1" cellpadding="2"
! control file name !! default !! included !! used by
|-
| [[authsenders]] || - || No || qmail-remote
|-
| [[badhelo]] || - || No || qmail-smtpd
|-
| [[badloadertypes.cdb]] || Mi5kb
MzIuZ

MyLmR

MyLkR
|| Yes || qmail-smtpd
|-
| [[badmailfrom]] || "*\ @*"
"!*@*.*"

"*%*"

(without quotes)
|| Yes || qmail-smtpd
|-
| [[badmailfromnorelay]] || - || No || qmail-smtpd
|-
| [[badmailto]] || []
[\{\}]

@.*@

[\%]

[\!]
|| Yes || qmail-smtpd
|-
| [[badmailtonorelay]] || - || No || qmail-smtpd
|-
| [[badmimetypes.cdb]] || TVoAAAEAA TVrhARwAK
TVoAAAQAA TVrmAU4AA

TVoFAQUAA TVrQAT8AA

TVoIARMAA TVrvAEQAe

TVouARsAA UEsDBAkAA

TVpAALQAc VFZxUUFBT

TVpQAAIAA VkZaeFVVR

TVpQAAMAA ZGltIGZpb

TVpyAXkAX
|| Yes || qmail-smtpd
|-
| [[blacklists]] || sbl.spamhaus.org || Yes || rblsmtpd
|-
| [[bouncefrom]] || MAILER-DAEMON || No || qmail-send
|-
| [[bouncehost]] || [[me]] || No || qmail-send
|-
| [[clientca.pem]] || - || No || qmail-smtpd
|-
| [[clientcert.pem]] || (generated) || Yes || qmail-remote
|-
| [[clientcrl.pem]] || - || No || qmail-smtpd
|-
| [[concurrencyincoming]] || 100 || Yes || tcpserver for
qmail-smtpd
|-
| [[concurrencylocal]] || 10 || No || qmail-send
|-
| [[concurrencyremote]] || 60 || Yes || qmail-send
|-
| [[databytes]] || 20971520 || Yes || qmail-smtpd
|-
| [[defaultdelivery]] || ./Maildir/ || Yes || qmail-local via
qmail-send and qmail-start
|-
| [[defaultdomain]] || <hostname --domain> || Yes || qmail-inject
|-
| [[defaulthost]] || <hostname --domain> || Yes || qmail-inject
|-
| [[dh1024.pem]] || (generated key) || Yes || qmail-smtpd
|-
| [[dh512.pem]] || (generated key) || Yes || qmail-smtpd
|-
| [[doublebouncehost]] || [[me]] || No || qmail-send
|-
| [[doublebounceto]] || postmaster || No || qmail-send
|-
| [[envnoathost]] || [[me]] || No || qmail-send
|-
| [[helohost]] || [[me]] || No || qmail-remote
|-
| [[idhost]] || [[me]] || No || qmail-inject
|-
| [[localiphost]] || [[me]] || No || qmail-smtpd
|-
| [[locals]] || localhost
<hostname --fqdn>
|| Yes || qmail-send
|-
| [[logcount]] || 100 || Yes || multilog
|-
| [[logsize]] || 1000000 (~1M) || Yes || multilog
|-
| [[me]] || <hostname --fqdn> || Yes || various defaults
|-
| [[morercpthosts]] || - || No || qmail-smtpd
|-
| [[percenthack]] || - || No || qmail-send
|-
| [[plusdomain]] || <hostname --domain> || Yes || qmail-inject
|-
| [[qmqpservers]] || - || No || qmail-qmqpc
|-
| [[queuelifetime]] || 86400 || Yes || qmail-send
|-
| [[rcpthosts]] || <hostname --fqdn> || Yes || qmail-smtpd
|-
| [[rsa512.pem]] || (generated key) || Yes || qmail-smtpd
|-
| [[servercert.pem]] || (generated key) || Yes || qmail-smtpd
|-
| [[smtpgreeting]] || (generated message) || Yes || qmail-smtpd
|-
| [[smtproutes]] || - || Yes || qmail-remote
|-
| [[spfbehavior]] || 3 || Yes || qmail-smtpd
|-
| [[spfexp]] || (default) || No || qmail-smtpd
|-
| [[spfguess]] || - || No || qmail-smtpd
|-
| [[spfrules]] || - || No || qmail-smtpd
|-
| [[taps]] || - || No || qmail-queue
|-
| [[timeoutconnect]] || 60 || No || qmail-remote
|-
| [[timeoutremote]] || 1200 || No || qmail-remote
|-
| [[timeoutsmtpd]] || 1200 || No || qmail-smtpd
|-
| [[tlsclientciphers]] || (generated) || Yes || qmail-remote
|-
| [[tlsclients]] || - || No || qmail-smtpd
|-
| [[tlshosts/exhaustivelist]] || - || No || qmail-remote
|-
| [[tlshosts/FQDN.pem]] || - || No || qmail-remote
|-
| [[tlsserverciphers]] || (generated) || Yes || qmail-smtpd
|-
| [[virtualdomains]] || (added by vpopmail) || No || qmail-send
|-
|}

Authsenders

2026-04-30T14:16:53Z

2025-08-22T19:00:09Z

Ebroch:

2025-08-21T16:35:32Z

Ebroch:

[[Main_Page#RHEL_10_&_Derivatives|Back]] 
=Enterprise Linux 10 Minimal Install=
==QMT Install ('Many-Domain')==
<nowiki>#</nowiki> curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh
<nowiki>#</nowiki> chmod 755 /usr/local/bin/qt_install
<nowiki>#</nowiki> qt_install
 ...installing... 
<nowiki>#</nowiki> toaststat 
Status of toaster services
send: up (pid 1323) 1517 seconds
smtp: up (pid 1324) 1517 seconds
submission: up (pid 1325) 1517 seconds
send/log: up (pid 1316) 1517 seconds
smtp/log: up (pid 1311) 1517 seconds
submission/log: up (pid 1314) 1517 seconds 
systemd service: clamd@scan: [ OK ]
systemd service: clamav-freshclam: [ OK ]
systemd service: spamassassin: [ OK ]
systemd service: dovecot: [ OK ]
systemd service: mariadb: [ OK ]
systemd service: httpd: [ OK ]
systemd service: named: [ OK ]
systemd service: ntpd: [ OK ]
systemd service: sshd: [ OK ]
systemd service: network: [ OK ]
systemd service: crond: [ OK ]
systemd service: acpid: [ OK ]
systemd service: atd: [ OK ]
systemd service: autofs: [ OK ]
systemd service: smartd: [ OK ]
systemd service: irqbalance: [ OK ] (Multiple processors only) 
<nowiki>#</nowiki> [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]
Enter a valid remote email account to which QMT will send mail: <email address>
IMAPS: postmaster@domain.tld --> success
Submission: postmaster@domain.tld --> success
SMTPS: postmaster@domain.tld --> success

[http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]
[http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]
Qmail-1.03-3.3.12 (OpenSSL3)
[https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied

== Install certificate ==
[[Certificate]] *Note: The certificate must be 2048 bits or more
== Test certificate ==
# curl --verbose smtps://mail.domain.tld
# curl --verbose imaps://mail.domain.tld
or
# openssl s_client mail.domain.tld:465
# openssl s_client mail.domain.tld:993
<pre>
<nowiki>*</nowiki> Server certificate:
<nowiki>*</nowiki> subject: CN=mail.domain.tld
<nowiki>*</nowiki> start date: Jul 30 09:16:16 2024 GMT
<nowiki>*</nowiki> expire date: Oct 28 09:16:15 2024 GMT
<nowiki>*</nowiki> subjectAltName: host "mail.domain.tld" matched cert's "mail.domain.tld"
<nowiki>*</nowiki> issuer: C=US; O=Let's Encrypt; CN=R11
<nowiki>*</nowiki> SSL certificate verify ok.
</pre>

If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits

806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354

Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:

certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache --rsa-key-size 2048 --key-type rsa

Rocky, Alma, Springdale 10 QT Install

2025-08-21T16:34:40Z

Ebroch: Created page with "Back =Enterprise Linux 10 Minimal Install= ==QMT Install ('Many-Domain')== <nowiki>#</nowiki> curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh <nowiki>#</nowiki> chmod 755 /usr/local/bin/qt_install <nowiki>#</nowiki> qt_install ...installing... <nowiki>#</nowiki> toaststat Status of toaster services send: up (pid 1323) 15..."

[[Main_Page#RHEL_10_&_Derivatives|Back]] 
=Enterprise Linux 10 Minimal Install=
==QMT Install ('Many-Domain')==
<nowiki>#</nowiki> curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_el10.sh
<nowiki>#</nowiki> chmod 755 /usr/local/bin/qt_install
<nowiki>#</nowiki> qt_install
 ...installing... 
<nowiki>#</nowiki> toaststat 
Status of toaster services
send: up (pid 1323) 1517 seconds
smtp: up (pid 1324) 1517 seconds
submission: up (pid 1325) 1517 seconds
send/log: up (pid 1316) 1517 seconds
smtp/log: up (pid 1311) 1517 seconds
submission/log: up (pid 1314) 1517 seconds 
systemd service: clamd@scan: [ OK ]
systemd service: clamav-freshclam: [ OK ]
systemd service: spamassassin: [ OK ]
systemd service: dovecot: [ OK ]
systemd service: mariadb: [ OK ]
systemd service: httpd: [ OK ]
systemd service: named: [ OK ]
systemd service: ntpd: [ OK ]
systemd service: sshd: [ OK ]
systemd service: network: [ OK ]
systemd service: crond: [ OK ]
systemd service: acpid: [ OK ]
systemd service: atd: [ OK ]
systemd service: autofs: [ OK ]
systemd service: smartd: [ OK ]
systemd service: irqbalance: [ OK ] (Multiple processors only) 
<nowiki>#</nowiki> [https://raw.githubusercontent.com/qmtoaster/scripts/master/conntest conntest]
Enter a valid remote email account to which QMT will send mail: <email address>
IMAPS: postmaster@domain.tld --> success
Submission: postmaster@domain.tld --> success
SMTPS: postmaster@domain.tld --> success

[http://wiki.qmailtoaster.org/index.php?title=Simscan Scanners]
[http://wiki.qmailtoaster.org/index.php?title=Alias_Domains Many Domain Install (Alias Domain)]
Qmail-1.03-3.3.11 (OpenSSL3)
[https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied

== Install certificate ==
[[Certificate]] *Note: The certificate must be 2048 bits or more
== Test certificate ==
# curl --verbose smtps://mail.domain.tld
# curl --verbose imaps://mail.domain.tld
or
# openssl s_client mail.domain.tld:465
# openssl s_client mail.domain.tld:993
<pre>
<nowiki>*</nowiki> Server certificate:
<nowiki>*</nowiki> subject: CN=mail.domain.tld
<nowiki>*</nowiki> start date: Jul 30 09:16:16 2024 GMT
<nowiki>*</nowiki> expire date: Oct 28 09:16:15 2024 GMT
<nowiki>*</nowiki> subjectAltName: host "mail.domain.tld" matched cert's "mail.domain.tld"
<nowiki>*</nowiki> issuer: C=US; O=Let's Encrypt; CN=R11
<nowiki>*</nowiki> SSL certificate verify ok.
</pre>

If the following error is encountered when testing the new certificate the certificate is most likely less than 2048 bits

806B7387577F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:ssl/record/ssl3_record.c:354

Usually Let's Encrypt certificates are at least 2048 bits, but encountering 256 bits keys is possible. Correct by specifying the number of bits:

certbot renew --cert-name -d domain.tld -d mail.domain.tld --apache --rsa-key-size 2048 --key-type rsa