OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: selective greylisting?

From: Robert Felber (r.felberek-muc.de)
Date: Thu Nov 02 2006 - 01:52:34 CST


On Wed, Nov 01, 2006 at 10:00:55PM +0100, Folkert van Heusden wrote:
> Hi,
>
> I'm using sqlgrey together with postfix.
> Would it be possible to do selective greylisting triggered by an
> rbl-list?

I fail to see the reason behind this. You can do selective greylisting based
on regular expression: either greylist host which have common dns names used
for dynamic clients (such as (cable|pool|dyn|\d.\d\.d\.d)\..*\..* or those
who do NOT match a regex like (smtp|mail|mx).*\..*\..*

If you want to use RBLs which list dynamic clients only then you may use for
instance policyd-weight with following configuration:

file /etc/policyd-weight.conf:

$dnsbl_checks_only = 1;
$MAXDNSBLHITS = 0;
$MAXDNSBLMSG = 'check_greylist';

dnsbl_score = (
     'dynablock.njabl.org', 3.25, 0, 'DYN_NJABL',
     'otherdyn.donain.tld', 0, 0, 'OTHER_RBL'
);

In postfix' main.cf you must the configure a restriction class for
'check_greylist' which utilizes sqlgrey or whatever you are using for
greylisting.

However, this approach is very ugly and using regular expression based
greylisting sounds more appropriate.

--
    Robert Felber (PGP: 896CF30B)
    Munich, Germany