OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Adding HOLD_DEFER to access - Postfix access table format ?

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Mon Feb 12 2007 - 13:19:40 CST

On Mon, Feb 12, 2007 at 02:16:11PM -0500, Wietse Venema wrote:

> Victor Duchovni:
> > On Mon, Feb 12, 2007 at 01:45:09PM -0500, Wietse Venema wrote:
> >
> > > > I am thinking to make a version of greylisting where mails
> > > > are put in HOLD queue and server reply with defer
> > > > (using smtpd_end_of_data_restrictions + check_policy_service)
> > > > This way I could fast deliver some msg if needed. But for this
> > > > a new action needs to be added to access table , maybe HOLD_DEFER
> > > > and HOLD_REJECT ?
> > >
> > > HOLD stores the message in the queue.
> > >
> > > DEFER tells the client to try deliver the message another time.
> > >
> > > The combination makes no sense at all.
> >
> > Well, it does if one wants to compute a checksum of the held message,
> > and apply some expensive analytics, wait for signature updates, ...
> > and to to allow delivery only when the client comes back with the same
> > message a second (later) time. If the client never comes back, no
> > message is delivered.
>
> One does not need HOLD (and the queue abuse) for that. A simple
> lookup table with header/body hashes is sufficient. It also uses
> less space.

Yes, as soon as the expensive (possibly somewhat delayed for signature
updates, ...) processing is done, one can discard the message and store
just the hash.

I agree that this is not a job for HOLD+DEFER, the concept of deferring
and keeping a copy is fine, but the Postfix access(5) (and policy)
machinery is not the right vehicle.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.