OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: best greylist method

From: SATOH Kiyoshi (satoh0hakuba.jp)
Date: Wed Aug 02 2006 - 21:47:43 CDT


On Tue, 1 Aug 2006 21:15:14 -0500
Mike Horwath <drechsauiphouse.net> wrote:
Subject: Re: best greylist method

> > I recommend Rgrey(S25R+greylisting) aiming at the same effect.
> >
> > S25R identifies whether the client is dynamic IP from the pattern of
> > client FQDN.
> > Only what matches to S25R does greylisting.
>
> sqlgrey does the same thing, kinda.
>
> It has greylisting by /24 unless the hostname matches a regex, at
> that point it is instead done at the /32 level if the regex hits.
>
> The regex is looking for dynamic/end-user RHS matches for DNS.

I read the source of sqlgrey.
This is the exactly same as the function added with Rgrey patch.
(http://k2net.hakuba.jp/pub/rgrey-0.2-1.21.tar.gz)
I think the proposal of the same technique by another place to be a very glad.
I think that S25R pattern is the same by the dyn_fqdn.regexp pattern.
And, It is better that there is smtp_server.regexp white list.

> And it does it all within the one policy daemon :)

I think that the regexp filter should go with postfix(main.cf).
Rgrey had done the regexp filter with (patched)postgrey daemon before.
However, it changed like doing the filter with postfix.
I thought that I was able to decrease the load for the method to pass policy daemon.

--
<satohhakuba.jp> http://d.hatena.ne.jp/stealthinu/