Milter-greylist

On 2/22/2011 5:30 AM, Johann Klasek wrote:

>>>   >  >  Sendmail is very quick at rejecting local addresses that are not in
>>>   >  >  the aliases or virtuser tables so that is normally not a problem, but
>>>   >  >  when milter-greylist is active it wants to greylist even the
>>>   >  >  undeliverable addresses.
>>>
>>> What does this look like in maillog?
>>
>> If I have 'acl greylist default ...." set, I get entries like:
>>
>> Feb 18 09:57:43 mailmx milter-greylist: p1IFvfPf026150: addr
>> [118.96.199.46][118.96.199.46] from<rosfoewi00leobla@...>  to
>> <pikepikephiru@...>  delayed for :02:00 (ACL 119)
>> Feb 18 09:57:43 mailmx sendmail[26150]: p1IFvfPf026150: Milter:
>> to=<pikepikephiru@...>, reject=451 4.7.1 Greylisting in action,
>> please come back later
>
> No other entries referencing p1IFvfPf026150 do exist?
> Strange ...
>
> What does it look like if milter-greylist is *not* active?
> Is something like
> Feb 18 09:57:43 sendmail[26150]: p1IFvfPf026150:<pikepikephiru@...>... User unknown
> in the log?

Yes, most of the domains are mapped by the virtuser table with a default 
where I have specified the user unknown error like:
@... error:nouser No such user here.
For the domains that don't have a default in virtusertable, sendmail 
looks at aliases and rejects anyone else with the standard error.

>> for every received message, even though the users don't exist. I'd
>> rather not do the extra processing.
>
> Maybe I did not got the problem: What means "undeliverable address" when
> it is neither local (local user or local alias) nor in the virusertable?

You could be relaying to domains not in DNS, or you might be configured 
to not deliver if the From: domain doesn't resolve.

> You mean local targets directly mapped to user accounts and aliases
> are treated differently? What happens when an alias is mapped to a local
> user?

This machine doesn't do any local deliveries.  Everything it accepts is 
either in virtusertable or aliases with a delivery address on a 
different internal machine.

> Is there any difference if you check working/non working addresses
> with
> /usr/lib/sendmail -bv
> # or more verbose
> /usr/lib/sendmail -d21.15 -bv
> ?

The ones with virtuser/alias matches show deliverable with the 
expansions, ones that don't match give a user unknown error.

>
> Can you tell us how is the "local" mailer defined in sendmail.cf/sendmail.mc
> (Mlocal line/Mailer(local) line)?

That goes to procmail, but no address should ever go there anyway.

-- 
   Les Mikesell
    lesmikesell@...