Milter-greylist

Hi Emmanuel,

On Thu, 6 Aug 2015 05:14:34 +0200, "manu@... [milter-greylist]"
<milter-greylist@yahoogroups.com> wrote:
> 'lists-yahoogroups@...' lists-yahoogroups@...
> [milter-greylist] <milter-greylist@yahoogroups.com> wrote:
> 
>> are there any good php scripts for urlcheck out here? Just want to make
>> my
>> 'list "grey users" rcpt' dynamically.
> 
> I do this using LDAP, with a PHP app to control what is stored there. I
> am not aware of heavy urlcheck users. Anyone can comment?

I was rethinking of my milter-greylist setup last night and came back to
an old thread "use URL lookup as call forward/ahead" from 08 Aug 2011 [1],
which has the same problem described in thread "Can milter-greylist run
after sendmail checks users?" 17 Feb 2011 by Les Mikesell.

I'm using mimedefang with "md_check_against_smtp_server" to check if a
recipient exists on my backend mail system. Milter-greylist is called
before mimedefang in sendmail.mc to use greylisting and rbl checks
benefits
before running into content scanning by spamassassin via mimedefang. A
side
effect, like described by Les Mikesell, is that milter-greylist is filling
up its database with non existing recipients, if setting a complete domain
to greylist (/.*@.../), instead of setting greylist for each
explicit address. An explicit address list in milter-greylist would mean
keeping virtusertable and greylist addresses in sync somehow. A global
greylisting of /.*@.../ will fill up milter-greylist's database,
because the sender is running first into milter-greylist before getting a
"user unknown", which is the job of mimedefang via
"md_check_against_smtp_server" defang.

Debian's milter-greylist package seems to support URL check support now
[3], therefore I thought instead of putting each valid recipient address
to
milter-greylist, I could use urlcheck to generate a dynamic list based on
addresses in my virtusertable or let milter-greylist do the call
forward/ahead to the backend via urlcheck scripts. Other ideas are running
a second mimedefang stripped down only to do the
"md_check_against_smtp_server" function and call it before milter-greylist
or just fill up sendmail's access file like "To:email@... RELAY",
"To:example.org ERROR:5.7.1:550 user unknown" (means a second address list
which has to be in sync as well).

Ciao
Marcus

[1] http://comments.gmane.org/gmane.mail.sendmail.milter.greylist/2990
[2} http://comments.gmane.org/gmane.mail.sendmail.milter.greylist/2885
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637441