Milter-greylist

Jim Klimov jimklimov@... [milter-greylist]
<milter-greylist@yahoogroups.com> wrote:

> But there is also another direction to consider - tell MGL to forget
> autowhited entries for hosts that were not caught by MGL, but scored high
> in content scanning by SA. And do so in a manner that peering MGL
> instances would replicate the expiration. Likely the two programs run on
> different servers

Would you be able to tell SA to feed your own local DNSRBL? This can be
done through scripting using nsupdate(1). Then you can have a racl rule
matching your DNSRBL along with the flushaddr action keyword, which will
flush the address from autowhitelist and greylist.

That looks like the simplier thing to do.  The only problem is
blacklisted entries expiration, which is not handled here. 

Alternatively you could also leverage the urlcheck clause, have a web
service where SA would store IP to be blacklisted (using curl for
instance), and haave milter-greylist using this information with
urlcheck/flushaddr. Your web service could perform expiration.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@...