Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

RE: [milter-greylist] New IPs of Google mail

2008-05-16 by attila.bruncsak@itu.int

> Am Donnerstag Mai 15 2008 16:00 schrieb Benoit Branciard:
> > attila.bruncsak@... a écrit :
> > >> - /@gmail\.com$/ means "any address ending with "@...". In
> > >> milter-greylist this would never match, since all envelope
> > >> FROMs always
> > >> end with ">".
> > >
> > > Do the spammers know that they must comply to the standard?
> > > I already seen e-mail addresses in the envelop without 
> opening "<" and
> > > closing ">". Unfortunately the sendmail happily accepts it.
> > > Since that time I always use like:
> > > /@gmail\.com[ 	>]*$/
> > > (Please note, there are a tab and a space in addition to 
> the ">" in the
> > > brackets.)
> >
> > You're right, I just verified Sendmail accepts envelope FROM's and
> > RCPT's without angle brackets, and they are transmitted as-is to
> > milter-greylist. So your regexp seems the right way to go...
> 
> may be I am missing something, but why would you want to 
> whitelist spammers 
> that don't comply to the standard? 
> Isn't it that legitimate(!) mails form gmail.com always would 
> have "gmail.com>" in their envelope-from?
> 

My note wasn't specific to gmail.com in whitelising their servers if SPF matches.
I used the term "like" gmail.com just for an example.
There are other valid ACL context where it really counts the precise match, for example:

racl greylist rcpt /@mycompany\.com>/

and

racl greylist rcpt /@mycompany\.com[ 	>]*$/

would give different result in the greylisting if the spammer use or
does not use surrounding "<" and ">" for the address myuser@... .

I hope this clarifies the point.

Bests,
Attila

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.