NAME

spamlogd —

SYNOPSIS

spamlogd

[-DI] [-i interface] [-l pflog_interface] [-W whiteexp] [-Y synctarget]

DESCRIPTION

spamlogd manipulates the spamd(8) database in /var/db/spamd used for greylisting. spamlogd updates the /var/db/spamd whitelist entries whenever a connection to port 25 is logged to the pflog(4) interface. The source addresses of inbound connections are whitelisted when seen by spamlogd to ensure that their entries in /var/db/spamd do not expire if the connecting host continues to send legitimate mail. The destination addresses of outbound connections are whitelisted when seen by spamlogd so that replies to outbound mail may be received without initial greylisting delays. Greylisting is explained more fully in spamd(8).

The options are as follows:

-D

Debugging mode. spamlogd does not disassociate from the controlling terminal.

-I

Specify that spamlogd is only to whitelist inbound SMTP connections. By default spamlogd will whitelist the source of inbound SMTP connections, and the target of outbound SMTP connections.

-i interface

Specify a network interface on which packets must arrive. The default is to watch for connections logged from all interfaces.

-l pflog_interface

Specify a pflog(4) interface to listen for connection notifications. The default is to watch for connections logged on “pflog0”.

-W whiteexp

Adjust the time for whiteexp in hours. The default is 864 hours (approximately 36 days); maximum is 2160 hours (approximately 90 days).

-Y synctarget

Add a target to receive synchronisation messages; see SYNCHRONISATION below. This option can be specified multiple times.

It is important to log any connections to and from the real MTA in order for spamlogd to update the whitelist entries. See spamd(8) for an example ruleset for logging such connections.

spamlogd sends log messages to syslogd(8) using facility daemon. spamlogd will log each connection it sees at level LOG_DEBUG.

SYNCHRONISATION

spamlogd supports realtime synchronisation of whitelist states by sending the information it updates to a number of spamd(8) daemons running on multiple machines. To enable synchronisation, use the command line option -Y to specify the machines to which spamlogd will send messages when it updates the state information. For more information, see spamd(8).

FILES

/var/db/spamd

SEE ALSO

syslog(3), pflog(4), spamd.conf(5), pflogd(8), spamd(8), spamd-setup(8), spamdb(8), syslogd(8), tcpdump(8)

HISTORY

The spamlogd command first appeared in OpenBSD 3.5.