mouss wrote:

> Henrik Krohns wrote:
>> On Thu, Jan 04, 2007 at 01:43:27AM +0100, mouss wrote:
>>   
>>> grant maxwell wrote:
>>>     
>>>>> It would be very simple to add "greylist command" support to policyd-
>>>>> weight.
>>>>> Used when you match only one RBL or get over some specific score. And p0f
>>>>> support contributing to the score? Heck, I'll make some patches myself, it
>>>>> would be much more useful than maRBL.
>>>>>
>>>>>
>>>>>     
>>>>>         
>>>> Henrik I agree. I would love to see the outcome of those patches :)
>>>>   
>>>>       
>>> just tell policyd-weight to return "greylist" and configure this a 
>>> restriction class in postfix.
>>>     
>>
>> What's the use for that? It would either greylist everything or just
>> greylist instead of directly rejecting.
>>   

> I meant: if an RBL is matched, then return "greylist". seems like what 
> you did in your patch.

>> I made the patch:
>>
>> http://hege.li/policyd-weight/greylist-p0f.diff
>>

So far I'm lovin' it.

Jan  4 08:49:54 mail postfix/policydweight[3736]: weighted check:
 NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5
  NOT_IN_BL_NJABL=-1.5 CL_IP_NE_HELO=1.5
   RESOLVED_IP_IS_NOT_HELO=1.5 (check from:
    .itripipod. - helo: .localhost. - helo-domain: .localhost.)
      FROM_NOT_FAILED_HELO(DOMAIN)=3 P0F_WINXP=2
      <client=86.193.177.153> <helo=localhost>
      <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>, rate: 3.5
      
Jan  4 08:49:54 mail postfix/policydweight[3736]: decided action=check_greylist

Jan  4 08:49:54 mail postfix/smtpd[3733]: NOQUEUE: reject: RCPT from
 ALyon-254-1-38-153.w86-193.abo.wanadoo.fr[86.193.177.153]: 450
  <[EMAIL PROTECTED]>: Recipient address rejected:
   Greylisted, see http://isg.ee.ethz.ch/tools/postgrey/help/example.com.html;
    from=<[EMAIL PROTECTED]> to=<[EMAIL PROTECTED]>
     proto=SMTP helo=<localhost>

~~~~~
Jan  4 12:27:20 mail postfix/policydweight[3617]: weighted check:
 NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 IN_BL_NJABL=4.25
  CL_IP_EQ_FROM_MX=-3.1 P0F_LINUX=-1 <client=83.133.120.8>
  <helo=r.therewarddeals.com> <[EMAIL PROTECTED]>
   <[EMAIL PROTECTED]>, rate: -2.85

Jan  4 12:27:20 mail postfix/policydweight[3617]: decided action=check_greylist

~~~~~

Using the greylist_rbl policy server I continued to get timeout errors
from Net::RBLClient and also:

Jan  4 06:34:01 mail postfix/spawn[10928]: warning: /usr/bin/perl:
 process id 10929: command time limit exceeded

This I may have been able to prevent by setting something like:
greylist_rbl_time_limit = 3730
but I have not tested with that setting to find out.

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to