Milter-greylist

Alexandre Santos <vanaxel79@...> writes:

> Im trying to integrate the milter-greylist with spamassassin
> (spamass-milter), i´m not shore if i´ve configure the pamass-milter
> right.

You have at least two problems.

> I add this acl in greylist.conf for the spamd.
>
> spamdsock unix "/var/run/spamd.sock"
> dacl blacklist spamd > 8 msg "Message blocked for spam content."
> dacl greylist spamd > 5 msg "Message greylist for spam content."
> dacl whitelist spamd < 2 msg "Message whitlist for spam content."
> racl greylist default
>
> I´m geting this log:
> Jun  8 11:16:15 smtp-3 milter-greylist: SPF return code 1
> Jun  8 11:16:15 smtp-3 milter-greylist: SPF lookup performed in 0.006049s
> Jun  8 11:16:15 smtp-3 spamass-milter[16859]: Could not retrieve sendmail macro "i"!.  Please add it to confMILTER_MACROS_ENVFROM for better spamassassin results

You didn't say what MTA you are using.  The fix for this depends on the MTA.
If you are running postfix then
  http://www.postfix.org/MILTER_README.html
may be helpful.  An example:

# Add _ for spamass-milter per http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510665
# Add i because spamass-milter complains, but to no avail.
milter_connect_macros = i j {daemon_name} v _
# {if_name} (recommended, not in source)

> Jun  8 11:16:15 smtp-3 milter-greylist: (unknown id): addr = clover.wormly.com[66.228.123.50], from = <tos@example.com>, rcpt = <tim@...>
> Jun  8 11:16:15 smtp-3 milter-greylist: Mail from=<tos@..., rcpt=<tim@...>, addr=clover.wormly.com[66.228.123.50] is matched by entry racl 145 whitelist default
> Jun  8 11:16:15 smtp-3 milter-greylist: (unknown id): skipping greylist because this is the default action, (from=<tos@...>, rcpt=<tim@example.com>, addr=clover.wormly.com[66.228.123.50]) ACL 145
> Jun  8 11:16:16 smtp-3 milter-greylist: spamd read failed: Connection reset by peer
> Jun  8 11:16:16 smtp-3 milter-greylist: ACL evaluation failure

This is probably your real issue.  It looks like milter-greylist cannot
talk to spamassassin.  Make sure the milter-greylist user/group can
read/write the spamassassin socket.

> It looks like the milter-greylist process the message fist and then the spamd.

this should be controlled by your MTA config.  So if you are going to
filter via spamassassin via milter-greylist, why are you running a
spamass-milter?

> And the message " Could not retrieve sendmail macro "i" ", how can I resolve this?


FWIW, I decided not to base greylisting on spam scores.  Basically, I
greylist for a long time (many hours) for hosts in any kind of
blocklist, don't greylist hosts in DNSWL, and greylist most others for 2
minutes.  This tends to keep my system from spending cycles processing a
lot of junk.