|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: selective greylisting?
From: Robert Felber (r.felber
ek-muc.de)
Date: Thu Nov 02 2006 - 01:59:27 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Thu, Nov 02, 2006 at 08:52:34AM +0100, Robert Felber wrote:
> On Wed, Nov 01, 2006 at 10:00:55PM +0100, Folkert van Heusden wrote:
> > Hi,
> >
> > I'm using sqlgrey together with postfix.
> > Would it be possible to do selective greylisting triggered by an
> > rbl-list?
>
> I fail to see the reason behind this. You can do selective greylisting based
> on regular expression: either greylist host which have common dns names used
> for dynamic clients (such as (cable|pool|dyn|\d.\d\.d\.d)\..*\..* or those
> who do NOT match a regex like (smtp|mail|mx).*\..*\..*
>
> If you want to use RBLs which list dynamic clients only then you may use for
> instance policyd-weight with following configuration:
>
> file /etc/policyd-weight.conf:
>
> $dnsbl_checks_only = 1;
> $MAXDNSBLHITS = 0;
> $MAXDNSBLMSG = 'check_greylist';
^^^^^^^^^^^^^^^^
This should probably be
$MAXDNSBLMSG = 'check_greylist ';
Policyd-weight returns then the string
"check_greylist ; check http://rbls.org/?q=$ip"
Usually it returns
"550 Your MTA is listed in too many DNSBLs; check http://rbls.org/?q=$ip"
I am not certain how postfix treats garbage in case of restriction classes.
--
Robert Felber (PGP: 896CF30B)
Munich, Germany
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]