Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] running milter-null before milter-greylist

2007-08-06 by Techwolf

On Sunday 05 August 2007 03:29:49 pm Kai Schaetzl wrote:
> I'm currently checking out the functionality of milter-null and have
> arranged it in sendmail.cf that it is carried out before milter-greylist
> (InputMailFilters). However, it seems that milter-greylist gets carried
> out before milter-null. e.g. connects with <> senders from joejob bounces
> or spam with <> senders get greylisted although they should normally get
> quarantined by milter-null. That means in some cases that the mail server
> gets hammered with connection retries, especially when the originating IP
> no. has been delayed by policy longer than usual.
> Is there a way to make sure that milter-null can first make a decision
> before greylisting kicks in or is that impossible?
>
> Kai

I ordered the InputMailFilters in sendmail.mc and it works on my system. I 
have three of them in there. Greylist, clamav, spamassasen.

INPUT_MAIL_FILTER(`greylist',`S=local:/var/milter-greylist/milter-greylist.sock')
define(`confMILTER_MACROS_CONNECT', `j, {if_addr}')
define(`confMILTER_MACROS_HELO', `{verify}, {cert_subject}')
define(`confMILTER_MACROS_ENVFROM', `i, {auth_authen}')
define(`confMILTER_MACROS_ENVRCPT', `{greylist}')
INPUT_MAIL_FILTER(`clmilter',`S=local:/var/clamav/clmilter.socket, F=, 
T=S:4m;R:4m')dnl
dnl define(`confINPUT_MAIL_FILTERS', `clmilter')
INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass.sock, F=, 
T=C:15m;S:4m;R:4m;E:10m')dnl
define(`confMILTER_MACROS_CONNECT',`b, j, _, {daemon_name}, {if_name}, 
{if_addr}')dnl

Note the "dnl define(`confINPUT_MAIL_FILTERS', `clmilter')" I had to take that 
out of the because it was messing up the order and other things in the 
sendmail.cf output. Let "mc" handle it.

--Techwolf

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.