Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] SPF SELF without known local address

2013-08-13 by Jim Klimov

On 2013-08-13 05:54, manu@... wrote:
> Jim Klimov <jimklimov@... <mailto:jimklimov%40cos.ru>> wrote:
>
>  > Is there a way to permit "spf pass" EXCEPT "spf self" hits early
>  > in the rules, and have those "spf self" hits fall through and be
>  > subjected to all the other tests like regex - not plain greylisted?
>
> Have you tried this?
> rcpt whitelist not spf self spf pass

Thanks, not yet, I'll give it a shot. Now I'd have to also forge
a very permissive SPF domain (which is not pre-whitelisted as the
server's "$self"), I guess ;)


>  > On another note, I'd like to log the remote host's IP, HELO, DNS PTR
>  > and FROM/RCPT addresses into X-Greylist headers of each processed
>  > message. Is it possible to add via config - without hacking into
>  > the "report all" source code?
>
> I beleive you can with format strings:
> %i sender IP address
> %h HELLO string
> %d sender DNS address
> %f FROM
> %r RCPT (beware of multi-recipient scenarios)
>
>  > As I've asked earlier - are there any ways to unconditionally inject
>  > SMTP responses (like "msg") and/or headers without dependency on a
>  > particular ACL rule hit and its msg/addheader parameters?
>
> racl continue msg "stuff"

Ok, I'll also try and see how it gos :)

Is it currently possible to cache the SPF test result and refer to it
with some format string (I asked earlier if there is such caching or
if DNS lookups and full libspf processing are done for each instance
of the SPF keyword - with the same result for given relay, domain and
from)?

Thnaks,
//Jim

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.