Milter-greylist

Le 02/10/2013 12:45, Jim Klimov a \ufffdcrit :
>     I wonder if there is a simple way that I missed to have an ACL
> rule hit if the specified criteria are NOT met?

Of course, using the "not" keyword.
This is a rather old feature, however I remember some versions of 
milter-greylist had it broken.
I can confirm it works with milter-greylist v4.2.7.

Example:
racl greylist not domain .ru delay 8h

Or you may just invert your test condition, by whitelisting first the 
peers you want to favor :

racl whitelist domain .ru
racl whitelist domain .su
racl greylist domain .com delay 5m
racl greylist default delay 8h


But I would advise againts using the above examples as-is: you may 
better use some fine-grained conditions. For exemple, all .ru IPs are 
likely not trustworthy mailservers (it may include some residential 
client IPs, which you likely don't want to trust the same way as 
corporate or ISP SMTP servers); and there may exist some trustworthy 
russian SMTP servers whose DNS entry do not match the .ru suffix (some 
may not have any PTR at all !).
A full-featured greylist.conf setup should include a combination of 
basic DNS tests, SPF tests, DNSRBL, DNS whitelists, and locally-defined 
whitelisted IPs or domains.

-- 
Benoit BRANCIARD
Service InfraStructures (SIS) - Direction du Syst\ufffdme d'Information (DSI)
Universit\ufffd Paris 1 Panth\ufffdon-Sorbonne
Centre Pierre Mend\ufffds France
B 406 - 90, rue de Tolbiac - 75634 Paris cedex 13 - France
T\ufffdl : +33 1 44 07 89 68 - Fax : +33 1 44 07 89 66
Accueil t\ufffdl. : +33 1 44 07 89 65
Assistance : assistance-dsi@...
Web : http://dsi.univ-paris1.fr

-- 
Ce message a ete verifie par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a ete trouve.