|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: selective greylisting?
From: Robert Felber (r.felber
ek-muc.de)
Date: Thu Nov 02 2006 - 01:52:34 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Wed, Nov 01, 2006 at 10:00:55PM +0100, Folkert van Heusden wrote:
> Hi,
>
> I'm using sqlgrey together with postfix.
> Would it be possible to do selective greylisting triggered by an
> rbl-list?
I fail to see the reason behind this. You can do selective greylisting based
on regular expression: either greylist host which have common dns names used
for dynamic clients (such as (cable|pool|dyn|\d.\d\.d\.d)\..*\..* or those
who do NOT match a regex like (smtp|mail|mx).*\..*\..*
If you want to use RBLs which list dynamic clients only then you may use for
instance policyd-weight with following configuration:
file /etc/policyd-weight.conf:
$dnsbl_checks_only = 1;
$MAXDNSBLHITS = 0;
$MAXDNSBLMSG = 'check_greylist';
dnsbl_score = (
'dynablock.njabl.org', 3.25, 0, 'DYN_NJABL',
'otherdyn.donain.tld', 0, 0, 'OTHER_RBL'
);
In postfix' main.cf you must the configure a restriction class for
'check_greylist' which utilizes sqlgrey or whatever you are using for
greylisting.
However, this approach is very ugly and using regular expression based
greylisting sounds more appropriate.
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]