Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] How To Whitelist a Dynamic IP Sender?

2008-02-26 by Matt Kettler

Bob Smith wrote:
> I would like to whitelist email received from a DNS address 
> (foo.dynip.com) which resolves to a dynamic IP address (and possibly a 
> different one the next time you look).
> 
> How do I do this?

AFAIK, there's nothing that currently supports this in milter-greylist. Can you 
use SMTP auth or TLS?


> Also, what is the difference between greylist.conf commands acl, racl, 
> dacl? 

acl is the old syntax, pre 3.1.3 and is the same as racl.

racl is ACLs applied at the time of the SMTP RCPT TO: command (ie: before any 
email is transfered). It is advisable to use these where possible. However, it 
is limited to acting on the sender's IP, reverse DNS, HELO, Mail From: (aka 
return-path) and RCPT TO: contents.

dacl is ACLs applied at the end of the DATA phase of the SMTP session (ie: after 
the email has been transfered). This allows milter-greylist to examine things 
like body text. However, it comes at a penalty of only running after the email 
is transfered, and AFAIK it does not support the greylist action. (greylisting 
at the data phase would likely result in a traffic flood anyway, so you do NOT 
want to do this. Ever.)


> The web page http://linux.die.net/man/5/greylist.conf doesn't 
> mention the latter two commands.

That's because it's the manpage for an older version of milter-greylist that 
didn't support racl/dacl.

>  Where else should I look?

On your system run:

man greylist.conf

That will give you the manpage for YOUR version of milter-greylist, not some 
arbitrary version that die.net is using.

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.