Re: [policyd-users] policyd.mib

2008-02-11 Thread Geert Hendrickx
This is what our "weekly" graph looks like. I try not to graph too much detail, e.g. greylist=new and greylist=abuse are added up to "deferred". This gives you a much better overview of what's actually going on. http://users.telenet.be/ghen/policyd/cricket_weekly.png This is from 8 MX hosts but

Re: [policyd-users] policyd.mib

2008-02-10 Thread Geert Hendrickx
On Sun, Feb 10, 2008 at 04:09:22PM -0200, Leonardo Rodrigues Magalhães wrote: > i have done some changes on policyd to allow those statistics to be directly > stored on a new MySQL table, thus making it available in 'real time' and > avoiding the logs processing every N minutes. > > I have deploye

Re: [policyd-users] [CLOSED] greylisting and several rcpts

2007-09-04 Thread Geert Hendrickx
On Tue, Sep 04, 2007 at 02:58:53PM +0200, Geert Hendrickx wrote: > On Tue, Sep 04, 2007 at 02:49:32PM +0200, Geert Hendrickx wrote: > > On Tue, Sep 04, 2007 at 07:41:36PM +0700, Artem Bokhan wrote: > > > Policyd with recipient_restrictions breaks user verification by anot

Re: [policyd-users] [CLOSED] greylisting and several rcpts

2007-09-04 Thread Geert Hendrickx
On Tue, Sep 04, 2007 at 02:49:32PM +0200, Geert Hendrickx wrote: > On Tue, Sep 04, 2007 at 07:41:36PM +0700, Artem Bokhan wrote: > > Policyd with recipient_restrictions breaks user verification by another > > servers. > > Empty triplet causes less problems then d

Re: [policyd-users] [CLOSED] greylisting and several rcpts

2007-09-04 Thread Geert Hendrickx
On Tue, Sep 04, 2007 at 07:41:36PM +0700, Artem Bokhan wrote: > Policyd with recipient_restrictions breaks user verification by another > servers. > Empty triplet causes less problems then delays in verification. Then use reject_unlisted_recipient before policyd. Geert ---

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
On Thu, Aug 30, 2007 at 03:27:08PM +0200, Cami Sardinha wrote: > Indeed. We had training mode running for about 2 months in > order to identify the top senders / email addresses. After > that point when people complained, they were whitelisted. > > There was a 2 -> 3 weeks teething period after go

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
On Thu, Aug 30, 2007 at 02:32:08PM +0200, Cami Sardinha wrote: > As Wietse has pointed out, you should be whitelisting the legitimate bulk > senders.. In an ISP environment, it is not obvious to know all your legitimate smtp clients... Geert -

[policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
Hi, has anyone experienced bad interaction between greylisting and (by default) low smtpd_hard_error_limit settings in postfix? Our smtpd_hard_error_limit has always been pretty high so I can't tell from my own experience. But with greylisting, clients get an error on each RCPT command initially

Re: [policyd-users] multiple instances of cleanup

2007-08-29 Thread Geert Hendrickx
On Wed, Aug 29, 2007 at 09:08:25AM -0500, John Beaver wrote: > I have a throttling instance and I have a greylisting/blacklisting > instance. In my case, each policyd instance is running with a different > configuration. Running a single cleanup would not "clean" all the tables > used. So each c

Re: [policyd-users] multiple instances of cleanup

2007-08-28 Thread Geert Hendrickx
On Tue, Aug 28, 2007 at 12:04:50PM -0700, Tobias Kreidl wrote: > If one is running multiple SMTP servers, is there any harm running > "cleanup" from each one > at the same time via a cron job, or is it better to stagger the times a > bit? You have to run it just once. On any MTA, or the database

Re: [policyd-users] Error in bind()

2007-08-28 Thread Geert Hendrickx
On Tue, Aug 28, 2007 at 12:21:43PM +0200, Benny Pedersen wrote: > > On Tue, August 28, 2007 11:52, Jordi Espasa Clofent wrote: > > > I want to use several features (greylisting, throttling...) but, > > obviosly, the main problem is I can test with it if policyd is not > > working fine. > > smtpd

Re: [policyd-users] Good SPF (only ?) policy deamon ?

2007-08-24 Thread Geert Hendrickx
On Fri, Aug 24, 2007 at 09:09:10AM -0500, Jim Wright wrote: > But since SPF is a bad standard and easy to get around by spammers, > what's the point? Spammers were some of the early adopters of SPF to > legitimize their mail... SPF is not intended to prevent spam, only to prevent forgery (though

Re: [policyd-users] Good SPF (only ?) policy deamon ?

2007-08-24 Thread Geert Hendrickx
On Fri, Aug 24, 2007 at 03:43:31PM +0200, Xavier Beaudouin wrote: > I understand Cami, but I am looking some good software like policyd is, > for spf checking... :) SPF is nowhere near the feature scope of policyd. Try Google, it will turn up quite some alternatives. Geert

[policyd-users] pkgsrc package for policyd

2007-08-07 Thread Geert Hendrickx
FYI: I imported a package for policyd in NetBSD's pkgsrc: mail/policyd. http://pkgsrc.se/mail/policyd (pkgsrc is a cross-platform package management system and is primarily being used on NetBSD and DragonFly, but also supports Linux, Solaris, Darwin (MacOS X), HP-UX, IRIX, ... http://www.pkgsrc.o

Re: [policyd-users] Redundant MySQL connection

2007-08-06 Thread Geert Hendrickx
On Mon, Aug 06, 2007 at 12:13:50PM +0200, Cami Sardinha wrote: > And what happens when someone requests a 3rd, 4th and 5th MySQL backup > option? I agree that duplication INSERT and UPDATE requests to multiple databases is not policyd's job, this should be implemented in a MySQL replication system

Re: [policyd-users] Sender Throttle with no limit...

2007-08-03 Thread Geert Hendrickx
On Fri, Aug 03, 2007 at 11:16:09AM -0300, Juan Pablo Bagnon wrote: > On 8/3/07, Fernando Schubert <[EMAIL PROTECTED]> wrote: > > > > Hi! > > > > I`ve implemented Policyd in my servers, it`s working great, but I`ve a > > small question. > > > > I need to throttle the mails sent by SASL but I don`t w

Re: [policyd-users] Increased Spam

2007-07-09 Thread Geert Hendrickx
On Mon, Jul 09, 2007 at 11:38:46AM -0400, Robert A. Pickering Jr. wrote: > Here's a philosophical question... > > If the SpamBots are really adapting and they are paying attention to > Greylisting, then are greylisting's days numbered? They could also fix their HELO strings, yet I can still block

Re: [policyd-users] Policyd website

2007-06-29 Thread Geert Hendrickx
On Fri, Jun 29, 2007 at 09:34:11PM +, Nigel Kukard wrote: > Hi, > > thanx, but where is the dokumentation? > > > README file in the policyd tarball. > > Problem here is with different versions of policyd the documentation may > differ slightly, for instance setting up the upcoming 1.9x bran

Re: [policyd-users] By received domain filtering

2007-06-18 Thread Geert Hendrickx
On Mon, Jun 18, 2007 at 07:16:07PM +0200, Sam Przyswa wrote: > Hi, > > I am new on PolicyD and on this list and perhaps my question was already > answered a lot time, sorry. > > We have a mail server who received mails for several domain and I would > like activate PolicyD on only one or two doma

Re: [policyd-users] autowhitelisting design question

2007-06-18 Thread Geert Hendrickx
On Mon, Jun 18, 2007 at 05:24:12PM +0200, Cami Sardinha wrote: > It used to be done via the cleanup script, but people complained. > > Doing it in real-time has the advantage of .. well .. being real > time without so many delays within the duration of cleanup -> cleanup. There have already been

[policyd-users] autowhitelisting design question

2007-06-18 Thread Geert Hendrickx
Hi Cami, I have a question about the auto-whitelisting algorithm; why is it implemented in greylist.c and not in cleanup.c? The way it is done now (synchronously) means an extra query ('SELECT COUNT(*) FROM triplet WHERE _host='%s' AND _count > 0') for each policyd request, whereas this overhead

Re: [policyd-users] feature request: p0f integration

2007-06-16 Thread Geert Hendrickx
On Sat, Jun 16, 2007 at 12:41:12PM -0400, Chris Covington wrote: > I've been using policyd since July 2005 and it's been the best thing > since sliced bread for us. I would like to make a feature request (or > perhaps this can be configured without changing policyd). I would > like to, for domain

[policyd-users] stats output alignment

2007-06-13 Thread Geert Hendrickx
Hi, (first post here) The output of the "stats" command is quite poorly aligned, I'm not sure whether this is intentional. The following change makes it look a lot better: --- mysql.c.orig2007-06-13 10:49:07.0 +0200 +++ mysql.c 2007-06-13 10:49:12.0 +0200 @@