OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: selective greylisting?

From: mouss (usebsdfree.fr)
Date: Fri Nov 10 2006 - 16:05:23 CST


Mark Martinec wrote:
> On Wednesday November 1 2006 22:49, Folkert van Heusden wrote:
>
>>>> Thank you, but that is not entirely what I would like to do: I would
>>>> like postfix to check an rbl-list and if the host is in that list, then
>>>> execute the greylisting-part. So ONLY do greylisting if it is in an
>>>> RBL-list.
>>>>
>>> That's only possible in the policy daemon itself, so patch the daemon
>>> that implements the greylisting.
>>>
>> I did some further googling and found this:
>> http://www.orangegroove.net/code/marbl/
>> which is exactly what you describe!
>> Seems to work...
>>
>
> Some time ago I suggested to Cami to incorporate remote fingerprinting
> intelligence into his policy daemon. Somehow this didn't catch,
> perhaps because modifying a C program is not as easy as doing it
> in Perl.
>

Cami's policyd is "asynchronous", so needs an asynchronous resolver.
There aren't much async resolver implementations out there, and the
available ones haven't been used enough. also, people are used to their
system resolver (integration with nsswitch and the like)...