Re: [AMaViS-user] maRBL on Debian

mouss wrote:

> Henrik Krohns wrote:
>> On Thu, Jan 04, 2007 at 01:43:27AM +0100, mouss wrote:
>>
>>> grant maxwell wrote:
>>>
>>>>> It would be very simple to add "greylist command" support to policyd-
>>>>> weight.
>>>>> Used when you match only one RBL or get over some specific score. And p0f
>>>>> support contributing to the score? Heck, I'll make some patches myself, it
>>>>> would be much more useful than maRBL.
>>>>>
>>>>>
>>>>>
>>>>>
>>>> Henrik I agree. I would love to see the outcome of those patches :)
>>>>
>>>>
>>> just tell policyd-weight to return "greylist" and configure this a
>>> restriction class in postfix.
>>>
>>
>> What's the use for that? It would either greylist everything or just
>> greylist instead of directly rejecting.
>>

> I meant: if an RBL is matched, then return "greylist". seems like what
> you did in your patch.

>> I made the patch:
>>
>> http://hege.li/policyd-weight/greylist-p0f.diff
>>

So far I'm lovin' it.

Jan 4 08:49:54 mail postfix/policydweight[3736]: weighted check:
NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5
NOT_IN_BL_NJABL=-1.5 CL_IP_NE_HELO=1.5
RESOLVED_IP_IS_NOT_HELO=1.5 (check from:
.itripipod. - helo: .localhost. - helo-domain: .localhost.)
FROM_NOT_FAILED_HELO(DOMAIN)=3 P0F_WINXP=2
<client=86.193.177.153> <helo=localhost>
<from=figury@itripipod.com> <to=20050622120914@example.com>, rate: 3.5

Jan 4 08:49:54 mail postfix/policydweight[3736]: decided action=check_greylist

Jan 4 08:49:54 mail postfix/smtpd[3733]: NOQUEUE: reject: RCPT from
ALyon-254-1-38-153.w86-193.abo.wanadoo.fr[86.193.177.153]: 450
<20050622120914@example.com>: Recipient address rejected:
Greylisted, see http://isg.ee.ethz.ch/tools/postgrey...mple.com.html;
from=<figury@itripipod.com> to=<20050622120914@example.com>
proto=SMTP helo=<localhost>

~~~~~
Jan 4 12:27:20 mail postfix/policydweight[3617]: weighted check:
NOT_IN_ZEN_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 IN_BL_NJABL=4.25
CL_IP_EQ_FROM_MX=-3.1 P0F_LINUX=-1 <client=83.133.120.8>
<helo=r.therewarddeals.com> <from=error@r.therewarddeals.com>
<to=curtis@example.com>, rate: -2.85

Jan 4 12:27:20 mail postfix/policydweight[3617]: decided action=check_greylist

~~~~~

Using the greylist_rbl policy server I continued to get timeout errors
from Net::RBLClient and also:

Jan 4 06:34:01 mail postfix/spawn[10928]: warning: /usr/bin/perl:
process id 10929: command time limit exceeded

This I may have been able to prevent by setting something like:
greylist_rbl_time_limit = 3730
but I have not tested with that setting to find out.

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?p...rge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/