Milter-greylist

At 01:59 PM 2/19/05, you wrote:

>Hey -
>
>Is there a good way to check to see how many messages which were delayed by 
>milter-greylist which never retried?
>
>I tried counting all instances of "Greylisting in action" from 
>/var/log/maillog and then all instances of "X-Greylist" but the figures were 
>not what I expected.  I thought there would be more greylist delays then 
>accepted messages but I think because I'm on so many really high volume 
>mailing lists that wasn't a good idea.
>
>I'm sure there's a fairly simple way to script it but I'm drawing a blank.

  I wrote a crude program to parse our sendmail logs each morning after they
get rotated.  It builds a linked list of each instance of "milter-greylist" that
is also "delayed for", then removes all the entries that later have a
"milter-greylist" and "autowhitelisted for".  The fields saved for each entry
are the from, addr and rcpt.  It doesn't catch everything, for example it
will fail to notice an entry that got greylisted just before the log was
rotated and whitelisted after, and it's falsely reporting filtered email
when the whitelisting the comes along later is a slightly different address,
but it does give a good rough idea how the filter is operating.

  You're on the right track, at least from what I've found in my own experiments.