Re: [Mimedefang] Sendmail SOCKETMAP

[Andrzej A. Filip]

Dianne Skoll  wrote:
> On Wed, 27 Apr 2016 20:54:43 +0200
> "Andrzej A. Filip"  wrote:
>
>> If your ambition is hardly limited then you may donate sendmail.org
>> "socketmap alike over UDP". It could be simple assuming design for
>> unix sockets.
>
> In our tests, the overhead wasn't the socket communication; it was the
> cost of doing the map lookups in Perl. 

With or without sendmail's "excessive" schemes of  lookups?
[ e.g. up to seven (?) loops for virtusertable, four lookups per
IPv4 address even without CIDR support]

With sendmail.cf changes number of lookups can be reduced "a few times+".

> And since we don't have any compelling use-case for it, I let the
> feature languish.

It may be used to allow mimedefang (dynamically) control:
* greeting pause
* allowed rate of connections per given IP adress/net
* allowed number of connections per given IP address/net

IMHO I may make sense to create list of features with
"secondary support" instead of deleting them (at once).

*BUT* socket map based features will be "less portable" to other MTAs.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Sendmail SOCKETMAP

[Andrzej A. Filip]

Dianne Skoll  wrote:
> On Wed, 27 Apr 2016 18:41:57 +0100
> Dave Osbourne  wrote:
>
> [Dianne]
>> > 2) Does anyone use the "-N map_sock" feature that provides a
>> > SOCKETMAP to Sendmail 8.13+?  If not... again, I'd like to nuke.
>
> [Dave]
>> I don't really know what this is...  have a exposed my ignorance? We
>> do use sendmail though... is there somewhere I can read about this to
>> know whether there will be an issue when we next update?
>
> Sendmail has various map types, the best known of which is the Berkeley DB
> map that typically implements access, mailertable, etc.
>
> Sendmail 8.13+ has provisions for a network protocol to do map lookups
> over sockets instead of doing Berkeley DB lookups.  In theory, this
> lets you do cool things, but we found in practice the performance hit
> was very high.
>
> If you don't know what SOCKETMAP is, you're almost certainly not
> using it. :)

If your ambition is hardly limited then you may donate sendmail.org
"socketmap alike over UDP". It could be simple assuming design for
unix sockets.

-- 
A. Filip
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

[Mimedefang] Marking email for special processing in sendmail.cf

[Andrzej A. Filip]

Is it possible to make mimedefang (milter) mark message for special
processing in sendmail.cf?

*Background:*
I have seen reports about antispam and antivirus milter working too
(long after DATA).  Some email clients triggered timeout in case of MUA
to MTA submissions.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Email injection and the android 'email' app

[Andrzej A. Filip]

On 03/04/2013 06:30 PM, Dale Moore wrote:
> [...]

I would suggest combination of per "SMTP AUTH user" bounce settings
(possibly with auto change) AND scripted scanning logs for offenders.

I hope you are not going to use another option mentioned without very
good reason/very hard pressure.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] Start Mimedefang with options

[Andrzej A. Filip]

On 06/11/2012 10:19 AM, Prabin Acharya wrote:
> I've just configured mimedefang and m currently testing filter_send and
> filter_relay. But to run these filters it says to run mimedefang with -s
> and -r option respectively.
> I'm trying /etc/init.d/mimedefang start but it doesn't let me add options.
> How do i start mimedefang with additional options?
Could you name (Linux?) distribution you use?
It should help to provide "ore on target" help.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Re: [Mimedefang] FYI: LinkedIn MIMEDefang group is gone

[Andrzej A. Filip]

On 06/06/2012 07:02 PM, David F. Skoll wrote:
> After the LinkedIn password fiasco, I have deleted my LinkedIn
> account.  Because I was the owner of the MIMEDefang group, I had to
> delete that too.
For future readers reference:
http://www.pcworld.com/article/257045/update_linkedin_confirms_account_passwords_hacked.html
 


  Update: LinkedIn Confirms Account Passwords Hacked


  By Ian Paul , PCWorld
  Jun 6, 2012 8:32 AM

/UPDATED 2:15 p.m. PT
[...]
/Recently, a file containing 6.5 million unique hashed passwords
appeared in an online forum based in Russia. More than 200,000 of these
passwords have reportedly been cracked so far.


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang