Milter-greylist

On Thu, Nov 02, 2006 at 03:59:36PM +0000, Jonathan Perkin wrote:
> I'm trialling milter-greylist on the BBC mail infrastructure, which
> receives around 1 million emails per day.  Recently I added
> 
>   acl greylist domain /[0-9][0-9]*\-[0-9][0-9]*\-[0-9][0-9]*/
>   acl greylist domain /[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*/
>   acl greylist domain /[0-9]{12}/
> 
> to the config to greylist anything which looks like a dynamic address,
> and since making that change my monitoring has shown milter-greylist
> to fail an awful lot more.

I used a rule like that in "milter-regex" for a while and it generated
a lot of false hits for hosts like "87-237-56-54.northerncolo.co.uk"
or "static-64-201-182-187.ptr.terago.ca"

A better way to do this is:

dnsrbl "SORBS DUN" dnsbl.sorbs.net 127.0.0.10
acl greylist dnsrbl "SORBS DUN" delay 12h

That will will require milter-greylist 3.0RC6.

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/