Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] [RFC] DNSRBL and variable settings

2006-07-19 by Michael Menge

Emmanuel Dreyfus wrote:
> Hello
> 
> Following the talks about variables greylisting settings (greylist delay 
> and timeout, autowhitelisting timeout) depending on the host:
> 
> Such a feature seems extremely interesting to me when combined with DNSRBL. 
> One could have a greylisting delay of 45m by default, 1d for hosts listed
> in a DNSRBL of xDSL pools, whitelist hosts listed in a DNSRBL of friendly 
> networks and so on.
> 
> That would be the opportunity to add a blacklist feature
> 
> ACL entries would look like this: 
> acl blacklist dnsrbl knownspammer.example.net
> acl whitelist dnsrbl friends.example.net
> acl greylist dnsrbl dslpool.example.net delay 1d timeout 3d autowhite 1d
> acl greylist default delay 45m timeout 3d autowhite 1d
> 
> Another example, which is a bit less satisfying
> acl blacklist dnsrbl knownspammer.example.net
> acl whitelist dnsrbl friends.example.net
> acl greylist rcpt john.doe@... dnsrbl dslpool.example.net delay 1d
> acl greylist rcpt john.doe@... delay 45m
> acl greylist rcpt manu@... dnsrbl dslpool.example.net delay 1d
> acl greylist rcpt manu@... delay 45m
> acl whitelist default
> 
> Problem: we have to duplicate a lot of informations. Obviously there is the
> need for some factoring syntax. Any comment or idea?
> 
> 
Grouping could reduce dublicate infos
i.e.

acl groupadd blafasel greylist dnsrbl dslpool.example.net delay 1d
acl groupadd blafasel greylist delay 45m
acl group blafasel rcpt john.doe@...
acl group blafasel rcpt manu@...

-- 
--------------------------------------------------------------------------------
M.Menge                                 Tel.: (49) 7071/29-70316
Universitaet Tuebingen                  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung          mail: menge@...-tuebingen.de
Waechterstrasse 76
72074 Tuebingen

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.