Milter-greylist

Hi Manu,

> Michael Mansour <mic@...> wrote:
> 
> > 1. perform a consistency check on the greylist.conf file before reloading it.
> 
> I use to run milter-greylist -cf on the new file before moving it to
> /etc/mail.
> 
> I agree that testing the config before reloading could be useful,
>  but it can also be quite time and memory consuming for sites that 
> have very large config file. There should probably be an option for that.

Yes. Admittedly I didn't know about the -cf option and ran it and it ran
through pretty quickly.

I agree if this was included (which I still think it should be because it's
way too easy to break the setup with an incorrect rule), then it should also
include the option to turn it off for people with large config files.

> > 2. have the ability to support an external whitelist file.
> > 
> > I've recently started looking at www.dnswl.org which provides a whitelist of
> > sites that are "trusted" and should not be greylisted.
> 
> Configure it as a DNSRBL and use it in a whitelist rule, you'll have
> real time DNS lookups on this DNSWL.
>
> Perhaps the dnsrbl keyword needs to be changed into "dnsl" so that
> people understand it can be used for any purpose (blacklist or
> whitelist)?

Hmm.. good point. I'm still new to milter-greylist and didn't realise I could
configure this in the greylist.conf file (just read the man page). I'll make
sure I compiled with the dnsrbl enabled (I built milter-greylist to an RPM and
installed from there) and see if I can figure out how to use the feature.

> > 3. have a web interface to the whitelist system.
> > 
> > It would be good to have a web interface for users to be able to access their
> > own whitelist system so they can enter "from" and "to" etc rules to manage
> > their greylist. Maybe even keep these in a MySQL database for each management?
> 
> At work, I store per-user settings in a LDAP directory. milter-greylist
> lookus up the directory using an urlcheck clause with an ldap:// URI.
> 
> I've a few web forms for user to enter their personnal white list, black
> list, the DNSRBL they want to use, and the delays they want for
> greylisting. They can also enable some content filter implemented by
> milter-greylist: no HTML with embedded GIF, no PDF files smaller than
> 30k, and so on.

Ok, I can see there's alot I can do in this regard. None of these types of
things (instructions or scripts or forms) are available anywhere on the net
are they?

> > 4. tools to pull out relevant information from the /var/log/maillog file.
> 
> Did you had a look at what can be done with the stat keyword? I use 
> it to provide a web-based per-user log of what hapened to each e-
> mail: rejected, delayed or accepted, with the sender and the reasons 
> for the decision.

I've search through man pages for both greylist.conf and milter-greylist, I
can't find any references to the "stat" keyword?

I'm using milter-greylist 3.0

Thanks.

Michael.

> -- 
> Emmanuel Dreyfus
> http://hcpnet.free.fr/pubz
> manu@...
------- End of Original Message -------