Milter-greylist

> rcpt=<christine.robinot@...>,

Thats why. You need to specify from domain, not just domain.

On Thursday 09 November 2006 01:48 pm, LE BOURDOULOUS Alain DSIC BEERTD CGN 
Messagerie wrote:
> Why laposte.net is whitelisted by the follow ACL ?
>
>
> acl whitelist domain fr
>
>
> Nov  9 19:43:20 tigre milter-greylist: kA9IhFAS012405: skipping greylist
> because sender DNS name mx.laposte.net is whitelisted,
> (from=<christine.robinot@...>,
> rcpt=<christine.robinot@...>,
> addr=mx.laposte.net[81.255.54.11])
>
>
>
>
> []# dig ANY mx.laposte.net
>
> mx.laposte.net.         533     IN      A       81.255.54.7
> mx.laposte.net.         533     IN      A       81.255.54.10
> mx.laposte.net.         533     IN      A       81.255.54.11
>
> laposte.net.            126106  IN      NS      ns3.laposte.net.
> laposte.net.            126106  IN      NS      ns2.laposte.net.
>
> ns3.laposte.net.        107138  IN      A       80.118.33.250
> ns2.laposte.net.        83968   IN      A       83.145.100.45
>
>
> Thanks
>
> Alain
>
> Oliver Fromme a écrit :
> >  > I use milter greylist 3.0 rc7.
> >  > I have a problem to find the best regular expression for
> >  > french sub domain ( xxx.fr)
> >  > acl whitelist from /.*@.*\.fr/
> >
> > You cannot use backslashes in regular expressions.
> > (Well, at least in milter-greylist 2.x, but I think
> > it didn't change in 3.x.)
> >
> >  > For example the follow domain match with this ACL
> >  > home5353.freeserve.co.uk
> >  >
> >  > I try this one, but it's the same:
> >  > acl whitelist from /.*@.*\.fr$/
> >
> > As explained above, you should remove the backslash.
> > No other TLD ends with "fr", so it should be OK.
> > If you're paranoid, you can use /.*[.]fr$/ because
> > the "." loses its special meaning inside "[]".
> >
> > Note that it is not recommended to match by sender email
> > addresses, because they can be easily forged (and in fact
> > they _are_ forged in many -- if not most -- cases of
> > spam).
> >
> > If you want to check the TLD of the sending MTA, you
> > should better just write:
> >
> > acl whitelist domain fr
> >
> > The "domain" keyword performs a suffix match on the domain
> > name of the connecting MTA (as resolved by sendmail).
> >
> > Best regards
> > Oliver
> >
> > PS: Please don't post HTML-only messages to technical
> > public mailing lists. You'll get more replies when using
> > plain text instead of HTML.
> >
> > --
> > Oliver Fromme, secnetix GmbH & Co. KG, Marktplatz 29, 85567 Grafing
> > Dienstleistungen mit Schwerpunkt FreeBSD: http://www.secnetix.de/bsd
> > <http://www.secnetix.de/bsd>
> > Any opinions expressed in this message may be personal to the author
> > and may not necessarily reflect the opinions of secnetix in any way.
> >
> > "I invented Ctrl-Alt-Delete, but Bill Gates made it famous."
> > -- David Bradley, original IBM PC design team